KR20070103981A - Method for communicating securely end-to-end of wire communication networks and wireless communication networks by using switching function of communication protocol stack, terminal devices and recording medium - Google Patents

Abstract

A method and a terminal for providing end-to-end security communication for a wire communication network and a wireless communication network using a communication protocol stack switching function and a recording medium for the same are provided to transmit and receive data safely and reliably by providing a security communication function corresponding to an end-to-end encryption scheme through a logical switching control layer which logically executes switching for an upper protocol layer and at least two lower protocol layers on the protocol stacks corresponding to wire/wireless communication functions. A terminal(100) having one or more wire/wireless communication functions comprises a switching part(170) and an encryption processing part(160). The switching part(170) executes logical switching for an upper protocol layer, a lower protocol layer corresponding to at least one wire communication protocol, and a lower protocol layer corresponding to at least one wireless communication protocol on the protocol stacks corresponding to the wire/wireless communication functions of the terminal(100). The encryption processing part(160) encodes the data to be transmitted through a presently connected communication network among one or more wire/wireless communication networks. If a communication packet containing the encoded data reaches a logical switching control layer, the switching part(160) switches and provides the communication packet to a lower protocol layer corresponding to the presently connected communication network.

Description

`` Method for Communicating Securely End-to-end of Wire Communication Networks and Wireless Communication Networks by Using Switching Function of Communication Protocol Stack, Terminal Devices and Recording Medium}

1 is a diagram illustrating a network connection configuration of a terminal having a switching function of a communication protocol stack according to an exemplary embodiment of the present invention.

2 is a diagram illustrating a preferred functional configuration of a terminal having a switching function of a communication protocol stack according to an embodiment of the present invention.

3 is a diagram illustrating a preferred functional configuration of a terminal having a switching function of a communication protocol stack according to another exemplary embodiment of the present invention.

4 is a diagram illustrating a preferred functional configuration of a terminal having a switching function of a communication protocol stack according to another exemplary embodiment of the present invention.

5A, 5B, and 5C are diagrams showing a preferred configuration diagram of a communication processing device configuration provided in a terminal according to an embodiment of the present invention.

6A, 6B, 6C, and 6D illustrate a logical switching control hierarchy that provides integrated processing of a communication protocol stack in accordance with one embodiment of the present invention.

7A, 7B, 7C, and 7D illustrate a logical switching control hierarchy for providing integrated processing of a communication protocol stack according to another embodiment of the present invention.

8 is a diagram illustrating a configuration of an IEEE 802.11x wireless LAN system according to an embodiment of the present invention.

9 is a diagram illustrating a configuration of an IEEE 802.16x based portable Internet system according to an embodiment of the present invention.

10A, 10B, and 10C illustrate a protocol stack structure in which a terminal equipped with a switching function of a communication protocol stack according to an embodiment of the present invention communicates with a server (and / or a terminal) on a communication network.

11 is a diagram illustrating a method for encrypting and transmitting data in a symmetric key (or secret key) method in a terminal equipped with a switching function of a communication protocol stack according to an exemplary embodiment of the present invention.

12 is a diagram illustrating a method of decrypting data received encrypted by a server (and / or terminal) by a symmetric key (or secret key) method according to an embodiment of the present invention.

FIG. 13 is a diagram for a method of encrypting and transmitting data in a public key infrastructure structure in a terminal equipped with a switching function of a communication protocol stack according to an exemplary embodiment of the present invention.

14 is a diagram illustrating a method for decrypting data received encrypted by a server (and / or terminal) in a public key infrastructure according to an embodiment of the present invention.

15 is a diagram illustrating a method of encrypting and transmitting data in an electronic envelope method in a terminal equipped with a switching function of a communication protocol stack according to an embodiment of the present invention.

FIG. 16 is a diagram illustrating a method of decrypting data received encrypted by a server (and / or terminal) by an electronic envelope method according to an embodiment of the present invention.

17 is a diagram illustrating a method for encrypting and transmitting data in a key exchange method in a terminal equipped with a switching function of a communication protocol stack according to an exemplary embodiment of the present invention.

18 is a diagram illustrating a method of decrypting data received encrypted by a server (and / or terminal) by a key exchange method according to an embodiment of the present invention.

19 is a diagram illustrating a process of loading a logical switching layer that provides an integrated processing function of a communication protocol stack to a terminal according to a preferred embodiment of the present invention.

20 is a diagram illustrating a process of transmitting predetermined encrypted data through an integrated processing function of a communication protocol stack provided in a terminal according to an exemplary embodiment of the present invention.

21 is a diagram illustrating a process of receiving predetermined encrypted data through an integrated processing function of a communication protocol stack provided in a terminal according to an exemplary embodiment of the present invention.

<Description of main parts of drawing>

100: terminal 105: control unit

110: screen output unit 115: sound processing unit

120: key input unit 125: IC chip reader unit

130: power supply unit 135: network connection check unit

140: communication network confirmation unit 145: handoff processing unit

150: protocol control unit 155: memory unit

160: switching unit 165: communication processing unit

The present invention provides a switching device and a communication protocol stack having a switching function of a communication protocol stack corresponding to an IEEE 802.11x-based wireless communication network and an IP-based wired communication network operating based on TCP / IP (and / or UDP / IP). An end-to-end secure communication method of a wired communication network and a wireless communication network using the function.

With the continuous development of information and communication technology, various types of wired communication infrastructure and wireless communication infrastructure have been established, and users can access the network anytime and anywhere through the wired communication infrastructure and / or wireless communication infrastructure according to their tastes.

However, in order for the user to access a network through the wired communication infrastructure and / or the wireless communication infrastructure, first, an economic burden of purchasing an expensive terminal device (and / or communication device) corresponding to each communication infrastructure, and second, There is an inconvenience in subscribing to a wired and / or wireless communication network corresponding to each communication infrastructure.

An object of the present invention is to provide a lower layer corresponding to at least one wired communication protocol and a higher protocol layer on a protocol stack corresponding to the wired communication function and / or the wireless communication function, having at least one wired communication function and a wireless communication function. Encrypting data to be transmitted through a currently connected communication network among the at least one wired and / or wireless communication network in a terminal device having a logical switching control layer for logically switching a lower protocol layer corresponding to a protocol layer and / or a wireless communication protocol. When the communication packet including the encrypted data reaches the logical switching control layer, the terminal device switches the communication packet to a lower protocol layer corresponding to a currently connected communication network to provide a switch of the communication protocol stack. It is a generic cross-wire communication network and a wireless communication network with the ability to provide end security communication method.

A terminal device providing end-to-end secure communication of a wired communication network and a wireless communication network using a switching function of a communication protocol stack according to the present invention includes at least one wired communication function and a wireless communication function, and includes at least one wired communication function and A switching unit for logically switching a higher protocol layer and a lower protocol layer corresponding to at least one wired communication protocol and / or a lower protocol layer corresponding to a wireless communication protocol on a protocol stack corresponding to a wireless communication function; And an encryption processing unit for encrypting data to be transmitted through the currently connected communication network among the at least one wired communication network and / or the wireless communication network.

According to the present invention, when the communication packet including the encrypted data reaches the logical switching control layer, the switching unit, characterized in that for switching to provide a lower protocol layer corresponding to the communication network currently connected to provide a communication network. .

According to the present invention, the terminal apparatus further comprises a protocol control unit for selecting and controlling a communication protocol for switching the communication packet including the encrypted data to a lower protocol layer corresponding to a currently connected communication network. It is done.

In addition, according to the present invention, the terminal device, the subscriber information and communication parameters corresponding to at least two or more communication networks that can be connected to the terminal device through at least one wireless communication function and / or wired communication function ( Paramenter) characterized in that it comprises a memory unit (and / or IC chip) for storing information.

Meanwhile, the present invention records a program for executing a function of a terminal component for providing end-to-end secure communication between a wired communication network and a wireless communication network using the switching function of the communication protocol stack described above. It includes.

Meanwhile, an end-to-end secure communication method of a wired communication network and a wireless communication network using a switching function of a communication protocol stack according to the present invention includes at least one wired communication function and a wireless communication function, and the wired communication function and / or wireless communication. In a terminal device provided with a logical switching control layer for logically switching a higher protocol layer and a lower protocol layer corresponding to at least one wired communication protocol and / or a lower protocol layer corresponding to a wireless communication protocol on a protocol stack corresponding to a function. Encrypting data to be transmitted over a currently connected one of the at least one wired and / or wireless communication network; And when the communication packet including the encrypted data reaches the logical switching control layer, switching and providing, by the terminal device, the communication packet to a lower protocol layer corresponding to a currently connected communication network. It is done.

According to the present invention, the encrypted data includes at least one of a symmetric key (and / or secret key) encryption method, and / or a public key encryption method, and / or a key exchange encryption method, and / or an electronic envelope encryption method. It is characterized by being encrypted through the above encryption method.

In addition, according to the present invention, the encrypted data is characterized in that the server (and / or terminal) receiving the communication packet containing the encrypted data is decrypted.

In addition, according to the present invention, the logical switching control layer, characterized in that provided in the same protocol layer on at least two or more protocol layers corresponding to the wireless communication function and / or wired communication function.

According to the present invention, the logical switching control layer is configured to switch an upper protocol layer on a protocol stack corresponding to the wireless communication function and / or a wired communication function to a lower protocol layer corresponding to a communication network to which the terminal apparatus is currently connected. Characterized in that.

According to the present invention, the logical switching control layer is a communication network to which the terminal apparatus currently accesses a transmission communication packet generated and provided in an upper protocol layer on a protocol stack corresponding to the wireless communication function and / or a wired communication function. And converting the packet structure into a packet structure corresponding to the lower protocol layer.

In addition, according to the present invention, the logical switching control layer is received from a communication network connected to the terminal device on a protocol stack corresponding to the wireless communication function and / or wired communication function and received from the lower protocol layer. It characterized in that it further comprises a function for converting to a packet structure corresponding to the upper protocol layer.

In addition, according to the present invention, the logical switching control layer is provided at an upper layer of the datalink layer (and / or medium access control layer) on the communication protocol stack, and / or from a sublayer of the network layer, and And / or provided at a higher layer of the network layer on the communication protocol stack, and / or provided from a sub-layer of the transport layer, and / or provided at a higher layer of the transport layer on the communication protocol stack, and / or a portion of the session layer. At least one or more provided from a layer, and / or provided from an upper layer of a session layer on a communication protocol stack, and / or provided from a sublayer of a presentation layer.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a network connection configuration of a terminal 100 having a switching function of a communication protocol stack according to an exemplary embodiment of the present invention.

In more detail, FIG. 1 illustrates a terminal 100 having a switching function of a communication protocol stack and at least one wired communication network (and / or communication connection) through at least one of the communication protocol stack. Network connection configuration for connecting (and / or communication connection) to the wired communication network as described above, and those skilled in the art to which the present invention belongs, switching to the communication protocol stack with reference to and / or Figure 1 It is possible to infer various implementation methods for the terminal 100 having a function to connect (and / or communicate) to at least one or more wired communication networks, and also to connect (and / or communicate to) at least one or more wired communication networks. The present invention includes all implementation methods inferred from the above, and is not limited to the implementation method shown in FIG.

According to the present invention, the terminal 100 is characterized in that the connection to a predetermined ESD (Electronic Software Delivery) server through a predetermined communication network currently connected to have a switching function of the communication protocol stack according to the present invention, By downloading a predetermined program file corresponding to the switching function of the communication protocol stack from the ESD server and mounting it in the terminal 100, the terminal 100 is provided with a switching function of the communication protocol stack according to the present invention.

According to the exemplary embodiment of the present invention, the server 100 is connected to the terminal 100 before the terminal 100 has a switching function of the communication protocol stack. It is preferable to include an ESD server for providing and mounting a predetermined program file corresponding to the switching function.

In FIG. 1 according to a preferred embodiment of the present invention, a wireless communication network connected to a terminal 100 having a switching function of the communication protocol stack is connected to a W-CDMA (W-CDMA) operating based on a code division multiple access (CDMA) stack. Wide-CDMA and / or High Speed Downlink Packet Access (HSDPA) based wireless networks (e.g., mobile networks), complex Pi-sigma network (CPSN) based wireless networks (e.g., satellite networks), and / or IEEE 802.11x based A wireless communication network (eg, wireless LAN communication network), and / or an IEEE 802.16x based wireless communication network (eg, portable Internet), and / or an orthogonal frequency division multiplexing access (OFDMA) based wireless communication network, and the like, The wired communication network to which the terminal 100 having the switching function of the communication protocol stack is connected is TCP / IP (Transmission Control Protocol / Internet Protocol) and / or UDP / IP (User Datagram Protocol / Intern). et protocol) based on IP based wired communication network is shown.

However, the terminal 100 equipped with the switching function of the communication protocol stack according to the present invention can never be connected only to the wired communication network and the wireless communication network shown in FIG. 1, and this FIG. 1 is in the technical field to which the present invention belongs. It is not only limited to those skilled in the art to efficiently describe the technical features of the terminal 100 having the switching function of the communication protocol stack according to the present invention.

Referring to FIG. 1, a terminal 100 equipped with a switching function of the communication protocol stack may be connected to at least one wireless communication network and / or at least one server (and / or terminal 100) through the wireless communication network. Wireless communication function for connecting a predetermined communication channel, and wired communication for connecting to at least one or more wired communication networks and / or connecting a predetermined communication channel with at least one or more servers (and / or terminals 100) through the wired communication network. And a function of connecting the terminal 100 to at least two communication networks as described above is realized through a switching function of a communication protocol stack according to the present invention.

According to the present invention, the terminal 100 equipped with the switching function of the communication protocol stack basically connects to a predetermined communication network (eg, a wired communication network or a wireless communication network), and / or at least one server through the communication network. (And / or terminal 100) and a function for connecting a predetermined communication channel is characterized in that it is provided.

According to an embodiment of the present invention, the terminal 100 having the switching function of the communication protocol stack is a wired terminal 100 that is basically connected to a predetermined wired communication network such as a personal computer (PC) and / or a laptop. ) Further includes a communication device configuration connected to at least one other communication network (eg, a wired communication network and / or a wireless communication network), and the wired communication network device configuration and the wired basically provided in the wired terminal 100. By providing a switching function of the communication protocol stack according to the present invention with respect to at least one or more other network device configuration additionally mounted in the terminal 100, at least one server (and connected to at least two or more communication networks and provided on each communication network (and And / or the terminal 100 and a predetermined communication channel.

In addition, the terminal 100 with a switching function of the communication protocol stack is at least one of the wireless terminal 100 is basically connected to the W-CDMA and / or HSDPA-based mobile communication network operating based on the CDMA stack A communication device configuration connected to another communication network (for example, a wired communication network and / or a wireless communication network) is additionally mounted, and is added to the mobile communication device configuration and the wireless terminal 100 which are basically provided in the wireless terminal 100. By providing a switching function of a communication protocol stack according to the present invention with respect to at least one other network device configuration mounted thereon, at least one server (and / or terminal 100) connected to at least two or more communication networks and provided on each network ) And a predetermined communication channel.

In addition, the terminal 100 with the switching function of the communication protocol stack is basically a wireless LAN based on IEEE 802.11x (eg, IEEE 802.11a, IEEE 802.11b, IEEE 802.11g, HIPERLAN / 2, etc.). With respect to the wireless terminal 100 connected to the wireless communication device, a communication device configuration connected to at least one or more other communication networks (for example, a wired communication network and / or a wireless communication network) is additionally installed, and the wireless terminal 100 is basically provided. With the switching function of the communication protocol stack according to the present invention for the mobile communication device configuration and at least one or more other communication network device configuration additionally mounted in the wireless terminal 100, access to at least two or more communication networks and on each communication network It is characterized by connecting a predetermined communication channel with at least one or more servers (and / or terminal 100).

In addition, at least one terminal 100 having a switching function of the communication protocol stack is connected to a wireless terminal 100 that is basically connected to a wireless Internet (WiBro) based on IEEE 802.16x (eg, IEEE 802.16e). A communication device configuration connected to another communication network (for example, a wired communication network and / or a wireless communication network) is additionally mounted, and is added to the mobile communication device configuration and the wireless terminal 100 which are basically provided in the wireless terminal 100. By providing a switching function of a communication protocol stack according to the present invention with respect to at least one other network device configuration mounted thereon, at least one server (and / or terminal 100) connected to at least two or more communication networks and provided on each network ) And a predetermined communication channel.

According to the invention, the terminal 100 equipped with the switching function of the communication protocol stack is basically connected to at least two or more communication networks (eg, wired communication networks or wireless communication networks), and / or at least through the respective communication networks. It is characterized in that it is provided with a function of connecting a predetermined communication channel with one or more servers (and / or terminal 100).

According to an embodiment of the present invention, the terminal 100 equipped with the switching function of the communication protocol stack is connected to at least one or more wired communication networks and / or wireless communication networks, and / or the respective wired communication networks and / or wireless communication networks. It is preferable that a function for connecting a predetermined communication channel with at least one or more servers (and / or terminal 100) is provided.

According to the exemplary embodiment of the present invention, a server to which the terminal 100 having the switching function of the communication protocol stack communicates through at least one wired network and / or a wireless communication network is at least one or more to the terminal 100. It is preferable to include a content providing server for providing a content file, and / or preferably comprises a web server through a web browsing function provided in the terminal 100, and / or the terminal 100 As such, it is preferable to include a financial server for providing at least one or more financial services.

If the person skilled in the art to which the present invention pertains, the terminal 100 having a switching function of the communication protocol stack communication server via at least one or more wired communication network and / or wireless communication network, the above example It will be clearly understood that all servers on the wired and / or wireless communication network are included in addition to the provided content providing server and / or web server and / or financial server, and the present invention is not limited thereto.

The communication protocol defines a format, a procedure, and a sequence defined by at least two communication devices (server and / or terminal 100) for transmitting and receiving predetermined information (or data), and the communication protocol controls physical circuits. And a plurality of layers for performing respective functions such as data connection control, relay transmission of a packet or file transfer control, and each of the layers in a predetermined communication protocol. Is done.

Here, detailed technical features and functions for each layer of the communication protocol are defined in each communication protocol standard, and the present invention does not violate the communication protocol standard.

According to an embodiment of the present invention, in the terminal 100 connecting to at least two or more communication networks (eg, a wired communication network or a wireless communication network), the switching function of the communication protocol stack according to the present invention is performed by the terminal 100. It can be realized by mounting through hardware device configuration and / or software functional configuration in the development and / or manufacturing stage, whereby the present invention is not limited.

According to another exemplary embodiment of the present invention, in the terminal 100 connecting to at least two or more communication networks (for example, a wired communication network or a wireless communication network), the switching function of the communication protocol stack according to the present invention is the terminal 100. After this development and / or manufacture, the program including the switching function of the communication protocol stack according to the present invention can be realized by recording on a predetermined recording medium provided in the terminal 100, thereby limiting the present invention. Not.

According to another exemplary embodiment of the present invention, in the terminal 100 connecting to at least two or more communication networks (eg, a wired communication network or a wireless communication network), a part of the switching function of the communication protocol stack according to the present invention may be used. In the development and / or manufacturing stage of the 100) is mounted through a hardware device configuration and / or software functional configuration, and the rest of the communication protocol stack according to the invention after the terminal 100 is developed and / or manufactured It can be realized by recording a program including a switching function of a predetermined recording medium provided in the terminal 100, by which the present invention is not limited.

For example, in order for the terminal 100 connecting to at least two communication networks (eg, a wired communication network or a wireless communication network) to access a predetermined wireless communication network, the terminal 100 should include an antenna unit, an RF processing unit, an IF processing unit, and a baseband unit. The hardware device configuration may include at least one electrical / electronic device and a circuit corresponding to the antenna unit, the RF processor, the IF processor, and the baseband unit, and the software functional configuration may include the antenna unit and the RF processor. And a program for controlling the operation of the IF processing unit and the baseband unit and processing the communication protocol defined in the wireless communication network through the operation control.

In particular, the program (for example, a program that controls the operation of the antenna unit, the RF processing unit, the IF processing unit and the baseband unit, and processes the communication protocol defined in the wireless communication network through the operation control) is a firmware (Firmware) In the form of memory in the device configuration (e.g., Read Only Memory (ROM) and / or Erratable Programmable Read Only Memory (EPROM) and / or Electrically Erasable and Programmable Read Only Memory (EEPROM, etc.)) and / or the The terminal 100 may be recorded in a memory provided in the terminal 100 in the form of a predetermined system program (and / or an application program according to the intention of a person skilled in the art) included in the operating system of the terminal 100. The present invention is not limited by this.

According to one embodiment of the invention, the terminal 100 may be connected to at least two or more wireless communication networks, for this purpose, the terminal 100 is a hardware device configuration and / or to connect to the two or more wireless communication networks The software functional configuration can be mounted independently corresponding to each wireless communication network, and the present invention is not limited thereby.

For example, the terminal 100 connecting to at least two or more communication networks may include an antenna unit, an RF processing unit, and an IF unit for connecting to a first wireless communication network (eg, an IEEE 802.11x-based wireless communication network) to access at least two or more wireless communication networks. And an antenna unit, an RF processor, an IF processor, and a baseband unit for connecting to a second wireless communication network (e.g., an IEEE 802.16x based wireless communication network). It is not limited.

According to another exemplary embodiment of the present invention, the terminal 100 may be connected to at least two or more wireless communication networks, and for this purpose, the terminal 100 may use a predetermined hardware configuration to connect the two or more wireless communication networks. After being designed and mounted to correspond to the two or more wireless communication networks, the mounted hardware device configuration may be implemented to be shared through a software functional configuration corresponding to each wireless communication network, and the present invention is not limited thereto.

For example, the terminal 100 connecting to at least two or more communication networks may use a frequency band corresponding to a first wireless communication network (eg, an IEEE 802.11x based wireless communication network) and a second wireless communication network (eg, to connect to at least two or more wireless communication networks). For example, an antenna unit, an RF processor, an IF processor, and a baseband unit including all frequency bands corresponding to an IEEE 802.16x based wireless communication network) are provided, and then the antenna unit, the RF processor, and the IF processor are configured through the software functional configuration. And the baseband unit may be controlled to operate in response to the first wireless communication network, and / or to operate in response to the second wireless communication network, and the present invention is not limited thereto.

According to an exemplary embodiment of the present invention, the terminal 100 may be connected to at least two wired communication networks, and for this purpose, the terminal 100 is a hardware device configuration and / or software for connecting to the two or more wired communication networks. A functional configuration can be mounted independently corresponding to each wired communication network, and the present invention is not limited thereto.

According to another exemplary embodiment of the present invention, the terminal 100 may be connected to at least two wired communication networks, and for this purpose, the terminal 100 may use a predetermined hardware device configuration to connect the two or more wired communication networks. After being designed and mounted to correspond to the two or more wired communication networks, the mounted hardware device configuration may be implemented to be shared through a software functional configuration corresponding to each wired communication network, and the present invention is not limited thereto.

According to an embodiment of the present invention, the terminal 100 may be connected to at least one wireless communication network and a wired communication network, and for this purpose, the terminal 100 may be configured as a hardware device for connecting to the wireless communication network and a wired communication network. Software functional configuration may be mounted independently corresponding to each wireless communication network and wired communication network, and the present invention is not limited thereto.

The terminal 100 having a switching function of the communication protocol stack is connected to a predetermined backbone network through a predetermined communication network including at least one of the wireless communication network and / or the wired communication network. .

In addition, the terminal 100 equipped with a switching function of the communication protocol stack is characterized in that a predetermined communication channel is connected to at least one server (and / or the terminal 100) through the backbone network.

For example, the terminal 100 having a switching function of the communication protocol stack is connected to a web server and a client / server based communication channel on the Internet through the backbone network, and / or the terminal 100 on the Internet and the P2P. A peer to peer based communication channel may be connected.

In addition, the terminal 100 equipped with the switching function of the communication protocol stack is a predetermined application network connected to the backbone network (eg, a network defined to provide a specialized application service on the backbone network (or based on the backbone network)). The server (and / or terminal 100) on the predetermined communication channel is characterized in that connected.

For example, the terminal 100 having the switching function of the communication protocol stack has a predetermined communication channel connected to a server (for example, a VoIP server) on an application network such as a predetermined Voice over IP network connected to the backbone network. And / or a communication channel with a VoIP terminal 100 on the VoIP network.

In addition, the terminal 100 having the switching function of the communication protocol stack is a terminal 100 on a predetermined external network (for example, a network connected through an application network and a predetermined gateway) connected to a predetermined application network connected to the backbone network. ) And a predetermined communication channel is connected.

For example, the terminal 100 having the switching function of the communication protocol stack includes a server (for example, an Automatic Response Service (ARS) server) on a public switched telephone network connected to a predetermined VoIP network connected to the backbone network. A predetermined communication channel may be connected, and / or a communication channel may be connected to the call terminal 100 on the VoIP network.

2 is a diagram showing a preferred functional configuration of a terminal 100 having a switching function of a communication protocol stack according to an embodiment of the present invention.

In more detail, FIG. 2 illustrates a communication protocol corresponding to a W-CDMA and / or HSDPA-based wireless communication network operating based on a CDMA stack and an IP-based wired communication network operating based on TCP / IP (and / or UDP / IP). As shown in FIG. 2, a preferred functional configuration of a terminal 100 having a switching function of a stack, and a person of ordinary skill in the art to which the present invention pertains, refer to and / or modify the present invention. Correspondingly, various functional configurations of the terminal 100 equipped with the switching function of the communication protocol stack may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG. No.

In FIG. 1 according to a preferred embodiment of the present invention, a communication network to which a terminal 100 having a switching function of the communication protocol stack is connected includes a W-CDMA and / or HSDPA based mobile communication network operating based on a CDMA stack. It is shown to include a wireless communication network and an IP-based wired communication network operating based on TCP / IP (and / or UDP / IP).

However, the terminal 100 equipped with the switching function of the communication protocol stack according to the present invention can never be connected only to the communication network shown in FIG. 2, which is a general knowledge in the art to which the present invention pertains. The present invention is only for efficiently explaining the functional configuration of the terminal 100 having the switching function of the communication protocol stack according to the present invention, but is not limited thereto.

Referring to FIG. 2, the terminal 100 having the switching function of the communication protocol stack includes a control unit 105 that controls and operates the overall function of the terminal 100, and an overall function of the terminal 100. A memory unit 155 for storing information (or data) necessary for controlling and operating the program, and / or recording a program necessary for controlling and operating the overall function of the terminal 100 and the terminal 100. W-CDMA and / or HSDPA-based wireless communication network operating based on the CDMA stack and WCDMA / HSDPA communication processing unit 135 for processing, and IP-based communication for processing the terminal 100 to communicate with IP-based wired communication network Characterized in that it comprises a processing unit 150, basically the screen output unit 110 for the screen output function of the terminal 100, the sound processing unit 115 for the sound input and output function of the terminal 100 And a key input unit 120 for a key input function of the terminal 100.

In addition, the terminal 100 equipped with a switching function of the communication protocol stack stores IC chip storage information (or data) necessary for controlling and operating a characteristic function of the terminal 100, and / or the IC And an IC chip reader unit 125 for interfacing with a predetermined IC chip (and / or IC card) for recording an IC chip program that performs a characteristic function corresponding to chip storage information (or data). do.

In addition, the terminal 100 having a switching function of the communication protocol stack includes a power supply unit 130 (eg, a power supply device and / or a battery, etc.) for supplying power required for the terminal 100 to operate. It is characterized by further comprising.

The control unit 105 includes a processor including a CPU / MPU in hardware and an execution memory (for example, a register and / or a random access memory (RAM)), and from the memory unit 155 to the terminal 100. A predetermined program routine for realizing the overall (and / or characteristic) function of the bus and / or a bus for inputting / outputting the program data and a predetermined electronic circuit (or integrated circuit) provided therefor, And a program routine which is software-loaded from a predetermined memory unit 155 (and / or chipset) into the execution memory to be arithmetic and processed through the processor to realize at least one predefined function. And / or generic term of the program data (hence, in the present invention, a predetermined program recorded on the recording medium of the terminal 100 for the switching function of the communication protocol stack). A gram routine is illustrated as being provided in the control unit 105 for convenience.), Various functions to be implemented in the terminal 100 by the control unit 105 are realized, and the above functions are realized. In order to control and operate the overall operation of the terminal 100.

In particular, when power is input to the terminal 100 to perform a function of the control unit 105 that controls and operates the overall operation of the terminal 100, an operating system routine stored in a predetermined memory unit 155, System management routines and / or system variables are loaded into the execution memory and computed by the processor to perform functions of providing an operating system, system management program, and / or communication service.

The screen output unit 110 drives a predetermined screen output device (for example, a liquid crystal display (LCD) device and / or a cathode ray tube (CRT) device, etc.) included in the terminal 100, and controls the control unit. Predetermined screen output data (for example, screen output data generated by a screen output program routine) generated from the 105, key data generated through the key input unit 120, and predetermined functions provided in the terminal 100; And outputting various information, signals, and / or contents (eg, text contents, image contents, and / or multimedia contents) extracted and / or generated in the process of performing the above operation to the screen output device. The screen output unit 110 includes a driver for outputting the screen output information (and / or data) according to the resolution and / or the number of colors corresponding to the screen output device.

The sound processor 115 drives a sound input device (for example, a microphone) provided in the terminal 100, encodes a predetermined sound signal input from the sound input device, and provides the sound signal to the controller 105. Or / or drives a sound input device (eg, a speaker) provided in the terminal 100, decodes a predetermined sound signal extracted and / or generated by the controller 105, and outputs a sound output device. (For example, a speaker). The sound processor 115 is provided with a predetermined vocoder and a codec. The sound processing unit 115 performs a function of a sound input unit provided in the terminal 100 through a microphone, or a sound output unit provided in the terminal 100 through the sound processing unit 115 and a speaker. Performs the function of.

The key input unit 120 includes a predetermined key having at least one key button including a predetermined number key and / or a character key and / or a function key. To detect information (or signals) input from a key input device (eg, a keypad, and / or a keyboard), and to control a specific input mode of the terminal 100 controlled by the controller 105; And / or predetermined information (or signal) is inputted from a predetermined key button provided in the keypad in the operation mode, so that at least one or more key events (eg, MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, MH_KEY_RELEASEEVENT) corresponding to the input information (or signal) are input. ), The generated key event is provided to the controller 105, and the controller 105 is configured to provide the key event in the current input mode and / or operation mode of the terminal 100. Read a predetermined key data corresponding to the (e.g., from the key table to store (manage) at least one or more key data corresponding to a specific key event in each terminal 100 input mode and / or operation mode to the key event) Read key data) and / or read a command for executing a predetermined function defined in accordance with the key event. The keypad including the key input unit 120 and at least one key button interlocks with each other to perform a function of a key input unit provided in the terminal 100.

The WCDMA / HSDPA communication processing unit 135 transmits the W-CDMA and / or the terminal 100 through the W-CDMA and / or HSDPA-based communication protocol among the switching functions of the communication protocol stack provided in the terminal 100. And processing the W-CDMA and / or HSDPA-based communication protocol with a network component on an HSDPA-based wireless communication network to perform wireless communication, and an antenna corresponding to the W-CDMA and / or HSDPA communication standard in hardware. And a radio frequency signal transmitted / received through the antenna by software in the RF processor, the IF processor, and the baseband unit in the W-CDMA and / or baseband unit. System program (e.g., firmware provided in each device configuration, and / or operating system of the terminal 100) to process in response to the HSDPA-based communication protocol And preferably it comprises a system program) (or included) which is provided, for this preferred embodiment will be described in detail through figures 5a.

The IP-based communication processor 150 performs the TCP / IP (and / or UDP /) through a TCP / IP (and / or UDP / IP) based communication protocol among switching functions of the communication protocol stack provided in the terminal 100. Characterized in that the wired communication through the TCP / IP (and / or UDP / IP) based communication protocol and the network components on the IP-based wired communication network, the hardware in the TCP / IP (and / or UDP /). And a device configuration including a connector, a signal transceiver and a signal processor corresponding to a communication standard, and the TCP / IP signal is transmitted from the signal transceiver and the signal processor to the electrical signal transmitted and received through the connector in software. A system program (e.g., firmware provided in each device configuration, and / or an operating system of the terminal 100) (or / or included) for processing in response to (and / or UDP / IP) based communication protocol. That is comprising a) the system program) is preferred.

Here, the connector preferably comprises at least one connector connected to the UTP (Unshielded Twisted Pair) cable and / or a connector connected to the BNC cable, wherein the signal transmission and reception unit decodes the electrical signal received through the connector And / or encoding data (and / or packets) to be transmitted through the connector into an electrical signal, wherein the signal processing unit buffers the decoded data to Extract a packet corresponding to a TCP / IP (and / or UDP / IP) based communication protocol, and / or extract the packet corresponding to the TCP / IP (and / or UDP / IP) based communication protocol. It is preferable to include the generating, and in particular, the signal transmission and reception unit and the signal processing unit is the data transmitted and received (and / Or retransmission and / or error detection for a packet).

Those skilled in the art to which the present invention belongs, the network configuration on the TCP / IP (and / or UDP / IP) based wired communication network through the TCP / IP (and / or UDP / IP) based communication protocol Since it will be familiar with the technical configuration of the element and the IP-based communication processing unit 150 for wired communication through the TCP / IP (and / or UDP / IP) based communication protocol, a detailed description thereof will be omitted for convenience. do.

The memory unit 155 is input / output information when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the terminal 100 is performed. And / or a general term for a memory for storing data; read only memory (ROM) corresponding to read-only memory, flash memory (FM), and electrically erasable and programmable read only memory (EEPROM). ), And a nonvolatile memory including at least one of a hard disk drive (HDD) and the like. In general, the ROM stores system information that should not be deleted, and the nonvolatile memory includes an operating system routine, a communication processing program routine, and / or various application program routines provided through the terminal 100 and information or data therefor. Is stored.

According to the present invention, in order to provide a switching function of the communication protocol stack, the memory unit 155 provides subscriber information and communication parameter information corresponding to at least two or more communication networks to which the terminal 100 can be connected. It is characterized by storing.

Here, the subscriber information is each subscriber information subscribed to at least two communication networks that the terminal 100 can access through the switching function of the communication protocol stack, and the terminal 100 switches the communication protocol stack. Through at least two or more communication networks through the terminal (100) to identify (and / or identify) the subscriber, and comprises the basic information for processing the charge corresponding to the network connection.

Further, the communication parameter information is parameter information for connecting to each communication network according to a communication protocol standard defined in at least two communication networks that the terminal 100 can access through a switching function of the communication protocol stack. In the process of accessing at least two communication networks through the switching function of the communication protocol stack, the method 100 includes basic information defined to transmit and receive with network components on each communication network.

According to the present invention, the memory unit 155 preferably stores a communication program routine for connecting to at least two communication networks to which the terminal 100 can connect in order to provide a switching function of the communication protocol stack. The communication program routine may be loaded into the execution memory of the controller 105 at the same time as the terminal 100 is booted (or through a predetermined communication related command), thereby switching the communication protocol stack. The functional configuration of the communication program routine that provides the function will be described as a block in the control section 105 for convenience.

The IC chip reader unit 125 includes an IC chip related functional configuration (eg, provided in the terminal 100) provided in the terminal 100 through an IC chip standard including ISO / IEC 7816 and / or ISO / IEC 14443. IC chip agent program) and the IC chip mounted on or detached from the terminal 100 to exchange information and / or data. For example, the IC chip reader unit 125 provides information and / or data exchange between the IC chip agent program and the IC chip through an application protocol data unit (APDU).

According to the present invention, the information and / or data exchanged through the IC chip reader unit 125 correspond to at least two or more communication networks to which the terminal 100 can be connected to provide a switching function of the communication protocol stack. Each subscriber information and communication parameter information may be included, and for this purpose, it is preferable that each subscriber information and communication parameter information corresponding to at least two or more communication networks to which the terminal 100 can be connected are stored in the IC chip. .

Here, the IC chip for storing each subscriber information and communication parameter information corresponding to at least two or more communication networks to which the terminal 100 can be connected includes a subscriber identity module (SIM), a universal identification module (UIM), and a universal subscriber (USIM). Identity Module) may be included, and the present invention is not limited thereto.

Referring to FIG. 2, a communication program routine for providing a switching function of the communication protocol may include at least one of a higher protocol layer on a protocol stack corresponding to at least one wired communication function and / or a wireless communication function included in the terminal 100. A switching unit 170 for logically switching a lower protocol layer corresponding to at least one or more wired communication protocols and / or a lower protocol layer corresponding to a wireless communication protocol, and the current one of the at least one or more wired and / or wireless communication networks. And a cryptographic processing unit 160 for encrypting data to be transmitted through the connected communication network. When the communication packet including the encrypted data reaches the logical switching control layer, The communication packet corresponding to the currently connected communication network It is characterized by providing a switch to the lower protocol layer.

In general, the application program provided in the terminal 100 is characterized in that the interworking with the highest layer on the communication protocol stack, and is manufactured and developed to fully trust the communication protocol stack of the lower layer.

That is, the application program provided in the terminal 100 operates by calling an API (Application Program Interface) function corresponding to the highest layer on the communication protocol stack, and the communication protocol stack of the lower layer is the communication processor (eg, And a system program provided in the WCDMA / HSDPA communication processing unit 135 and / or the IP-based communication processing unit 150, and / or a system program provided in the operating system of the terminal 100. The application does not access the communication protocol stack of the lower layer.

According to the present invention, in the communication protocol structure as described above, the switching unit 170 is at least two or more communication processing units (eg, WCDMA / HSDPA communication processing unit 135 and / or IP-based communication processing unit provided in the terminal 100) Implement a Logical Switching Control (LSC) layer between a communication protocol layer (eg, physical layer, data link layer) corresponding to 150 and a communication protocol layer provided on an operating system of the terminal 100. Characterized in that.

According to an embodiment of the present invention, the logical switching control layer is included in a predetermined protocol layer on the communication protocol layer provided in the terminal 100 and / or separated into at least two or more protocol layers according to the function of each layer. The present invention is not limited thereto.

According to an embodiment of the present invention, the protocol stack above the logical switching control layer preferably includes a structure included in a hierarchical structure corresponding to the main communication protocol stack corresponding to the terminal 100. The switching control layer controls the upper layer of the layer including the logical switching control layer among the main communication protocol stack included in the terminal 100 to be processed by the main communication protocol stack, and / or the logical switching control layer is The lower layer of the included layer is preferably controlled to be switched to any one of a lower layer of the main communication protocol stack and / or an equivalent lower layer of at least one or more other communication protocol stacks provided in the terminal 100.

For example, if the terminal 100 is a main communication protocol stack is a WCDMA / HSDPA communication protocol, and the logical switching control layer is provided in a specific layer of the WCDMA / HSDPA communication protocol layer, the logical switching control layer is provided at this time The upper layer of the configured layer is implemented as the WCDMA / HSDPA communication protocol layer, and the lower layer of the layer provided with the logical switching control layer includes the lower layer of the WCDMA / HSDPA communication protocol stack, and also the WCDMA / HSDPA communication. Lower layers of other communication protocol (e.g., IP-based communication protocol) stacks equivalent to lower layers of the protocol stack are included.

In this case, the logical switching control layer may link the lower layer of the WCDMA / HSDPA communication protocol stack corresponding to the lower logical switching control layer to an upper layer of the WCDMA / HSDPA communication protocol stack, and / or the logical switching control. A lower layer of another communication protocol (eg, IP based communication protocol) stack corresponding to the lower layer is interworked by switching to an upper layer of the WCDMA / HSDPA communication protocol stack.

Further, for example, if the terminal 100 is a main communication protocol stack is an IP-based communication protocol, and the logical switching control layer is provided in a specific layer of the IP-based communication protocol layer, then the logical switching control layer is provided. The upper layer of the configured layer is implemented as the IP-based communication protocol layer, and the lower layer of the layer provided with the logical switching control layer includes the lower layer of the IP-based communication protocol stack, and also the IP-based communication protocol stack. Lower layers of other communication protocol (e.g., WCDMA / HSDPA communication protocol) stacks equivalent to lower layers of.

In this case, the logical switching control layer interworks with a lower layer of the IP-based communication protocol stack corresponding to a lower layer of the logical switching control layer to an upper layer of the IP-based communication protocol stack, and / or is lower than the logical switching control layer. Interwork by switching a lower layer of another communication protocol (eg, WCDMA / HSDPA communication protocol) stack corresponding to the upper layer of the IP-based communication protocol stack.

According to another embodiment of the present invention, the protocol stack above the logical switching control layer preferably comprises a compatible protocol stack structure for at least two or more protocol stacks provided in the terminal 100, the logical switching The protocol stack below the control layer preferably comprises at least two other communication protocol stacks compatible with compatible protocol stacks above the logical switching control layer, wherein the logical switching control layer is the communication protocol stack of the lower layer. It is preferable to control to switch any one of the communication protocol stacks to the compatible protocol stack of the upper layer.

For example, the compatible protocol stack above the logical switching control layer is a protocol stack compatible with a WCDMA / HSDPA communication protocol stack IP-based communication protocol stack and the like, and the protocol stack below the logical switching control layer is the WCDMA / HSDPA communication protocol stack and / or the like. Or any one of an IP based communication protocol stack, the logical switching control layer switches any one of the lower WCDMA / HSDPA communication protocol stack and / or the IP based communication protocol stack and the upper compatible protocol stack. To work together.

According to the present invention, the logical switching control layer corresponding to the switching unit 170 performing the switching function of the communication protocol stack as described above in the communication protocol structure, the upper communication packet generated by the upper protocol stack A lower communication packet corresponding to a lower protocol stack corresponding to a communication network to which the terminal 100 is currently connected, and / or a lower communication corresponding to a lower protocol stack corresponding to a communication network to which the terminal 100 is currently connected. And a communication packet compatible function for converting a packet into an upper communication packet corresponding to the upper protocol stack.

Data to be transmitted from the application program provided in the terminal 100 to the server (and / or terminal 100) on the communication network from the upper layer on the communication protocol layer to the lower layer while the packet information corresponding to each protocol layer is added The lowermost layer (e.g., physical layer) is transferred to the server (and / or terminal 100) via the communication network the communication packet containing at least one packet information corresponding to each layer as described above. In this case, the logical switching control layer is a protocol layer including the logical switching control layer while the packet information corresponding to each protocol layer is added from an upper layer on the communication protocol layer from an application provided in the terminal 100. Lower profile corresponding to the communication network to which the terminal 100 is currently connected to the transferred packet Converted to a structure that can transfer the call layer, it is desirable to transfer the packet, said conversion to a lower protocol layer of the terminal 100 corresponds to a communication network is currently connected.

In addition, the data received by the application program provided in the terminal 100 from the server (and / or terminal 100) on the communication network is the upper layer while the packet information corresponding to each protocol layer is removed from the lower layer on the communication protocol layer The uppermost layer provides data to which the packet information is removed from each layer to the application program as described above, wherein the logical switching control layer corresponds to a communication network to which the terminal 100 is currently connected. The packet information corresponding to each protocol layer is removed from the lower protocol layer, and the packet transferred to the protocol layer including the logical switching control layer is converted into a structure that can be transferred to the upper protocol layer. It is desirable to migrate to higher protocol layers.

The encryption processing unit 160 encrypts data to be transmitted through the currently connected communication network among at least one or more wired and / or wireless communication networks through the switching function of the communication protocol stack according to the present invention. Herein, the encryption processing unit 160 encrypts the data among a symmetric key (or secret key) encryption method, and / or a public key encryption method, and / or a full-length envelope encryption method, and / or a key exchange encryption method. It is preferred to be encrypted in at least one way.

According to the exemplary embodiment of the present invention, the encrypted data in the encryption processing unit 160 is included in a predetermined communication packet in the uppermost layer on the communication protocol stack provided in the terminal 100 and provided to a lower layer of the next step. .

As described above, it is preferable that predetermined packet information corresponding to each protocol layer is added to a communication packet provided to a lower layer on the communication protocol stack provided in the terminal 100, and the communication packet is provided on the communication protocol stack. The logical switching control layer is reached.

When the communication packet including the encrypted data reaches the logical switching control layer, the logical switching control layer transmits the communication packet including the encrypted data to the wired communication network (or wireless communication network) to which the terminal 100 is currently connected. Switch to the lower protocol layer corresponding to the communication protocol, the communication packet provided to the lower protocol layer is transmitted to the server (and / or terminal 100) through the wired communication network (or wireless communication network) to which the terminal 100 is currently connected do.

The server (and / or the terminal 100) receiving the communication packet restores the encrypted data from the received communication packet and decrypts (e.g., corresponds to a method of encrypting the data in the terminal 100). , A symmetric key (or secret key) decryption scheme, and / or a public key decryption scheme, and / or a full-length envelope decryption scheme, and / or a key exchange decryption scheme, the encryption scheme used to encrypt the data by the terminal 100. A corresponding decoding method) to extract the original data.

The protocol control unit 165 controls the logical switching control layer and its lower layer to operate through a protocol layer corresponding to the identified communication network, and the logical switching control layer switches to interwork by switching the lower layer and the upper layer. It is characterized by controlling.

3 is a diagram illustrating a preferred functional configuration of a terminal 100 having a switching function of a communication protocol stack according to another exemplary embodiment of the present invention.

In more detail, FIG. 3 illustrates a terminal 100 having a switching function of a communication protocol stack corresponding to an IEEE 802.11x based wireless communication network and an IP based wired communication network operating based on TCP / IP (and / or UDP / IP). As illustrated in FIG. 3, a person having ordinary skill in the art may have a switching function of a communication protocol stack corresponding to at least two communication networks by referring to and / or modifying the present invention. Various functional configurations of the terminal 100 may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method illustrated in FIG.

In FIG. 1 according to a preferred embodiment of the present invention, a communication network to which a terminal 100 having a switching function of the communication protocol stack is connected includes a wireless communication network including at least one IEEE 802.11x-based wireless LAN communication network, and the like. It is shown to include an IP-based wired communication network operating based on TCP / IP (and / or UDP / IP).

However, the terminal 100 equipped with the switching function of the communication protocol stack according to the present invention can never be connected only to the communication network shown in FIG. 3, which is a general knowledge of the present invention. The present invention is only for efficiently explaining the functional configuration of the terminal 100 having the switching function of the communication protocol stack according to the present invention, but is not limited thereto.

Referring to FIG. 3, the terminal 100 having the switching function of the communication protocol stack includes a control unit 105 for controlling and operating the overall function of the terminal 100, and an overall function of the terminal 100. A memory unit 155 for storing information (or data) necessary for control and operation, and / or recording a program necessary for controlling and operating the overall function of the terminal 100, and the terminal 100 for IEEE IEEE 802.11x communication processing unit 140 for processing to communicate with 802.11x-based wireless communication network, and IP-based communication processing unit 150 for processing the terminal 100 to communicate with the IP-based wired communication network Basically, the screen output unit 110 for the screen output function of the terminal 100, the sound processor 115 for the sound input and output function of the terminal 100, and the key input function of the terminal 100It provided with a key input unit 120 by default, characterized in that formed.

In addition, the terminal 100 equipped with a switching function of the communication protocol stack stores IC chip storage information (or data) necessary for controlling and operating a characteristic function of the terminal 100, and / or the IC And an IC chip reader unit 125 for interfacing with a predetermined IC chip (and / or IC card) for recording an IC chip program that performs a characteristic function corresponding to chip storage information (or data). do.

In addition, the terminal 100 having a switching function of the communication protocol stack includes a power supply unit 130 (eg, a power supply device and / or a battery, etc.) for supplying power required for the terminal 100 to operate. It is characterized by further comprising.

The control unit 105 includes a processor including a CPU / MPU in hardware and an execution memory (for example, a register and / or a random access memory (RAM)), and from the memory unit 155 to the terminal 100. A predetermined program routine for realizing the overall (and / or characteristic) function of the bus and / or a bus for inputting / outputting the program data and a predetermined electronic circuit (or integrated circuit) provided therefor, And a program routine which is software-loaded from a predetermined memory unit 155 (and / or chipset) into the execution memory to be arithmetic and processed through the processor to realize at least one predefined function. And / or generic term of the program data (hence, in the present invention, a predetermined program recorded on the recording medium of the terminal 100 for the switching function of the communication protocol stack). A gram routine is illustrated as being provided in the control unit 105 for convenience.), Various functions to be implemented in the terminal 100 by the control unit 105 are realized, and the above functions are realized. In order to control and operate the overall operation of the terminal 100.

In particular, when power is input to the terminal 100 to perform a function of the control unit 105 that controls and operates the overall operation of the terminal 100, an operating system routine stored in a predetermined memory unit 155, System management routines and / or system variables are loaded into the execution memory and computed by the processor to perform functions of providing an operating system, system management program, and / or communication service.

The screen output unit 110 drives a predetermined screen output device (for example, a liquid crystal display (LCD) device and / or a cathode ray tube (CRT) device, etc.) included in the terminal 100, and controls the control unit. Predetermined screen output data generated from the 105 (for example, screen output data generated by a screen output program routine), key data generated through the key input unit 120, predetermined data provided in the terminal 100; And outputting various information, signals, and / or contents (eg, text contents, image contents, and / or multimedia contents) extracted and / or generated in the process of performing a function to the screen output device. The screen output unit 110 includes a driver for outputting the screen output information (and / or data) according to the resolution and / or the number of colors corresponding to the screen output device.

The sound processor 115 drives a sound input device (for example, a microphone) provided in the terminal 100, encodes a predetermined sound signal input from the sound input device, and provides the sound signal to the controller 105. Or / or drives a sound input device (eg, a speaker) provided in the terminal 100, decodes a predetermined sound signal extracted and / or generated by the controller 105, and outputs a sound output device. (For example, a speaker). The sound processor 115 is provided with a predetermined vocoder and a codec. The sound processing unit 115 performs a function of a sound input unit provided in the terminal 100 through the microphone, or the sound output unit provided in the terminal 100 through the sound processing unit 115 and a speaker. Perform the function.

The key input unit 120 includes a predetermined key having at least one key button including a predetermined number key and / or a character key and / or a function key. To detect information (or signals) input from a key input device (eg, a keypad, and / or a keyboard), and to control a specific input mode of the terminal 100 controlled by the controller 105; And / or predetermined information (or signal) is inputted from a predetermined key button provided in the keypad in the operation mode, so that at least one or more key events (eg, MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, MH_KEY_RELEASEEVENT) corresponding to the input information (or signal) are input. ), The generated key event is provided to the controller 105, and the controller 105 is configured to provide the key event in the current input mode and / or operation mode of the terminal 100. Read a predetermined key data corresponding to the (e.g., from the key table to store (manage) at least one or more key data corresponding to a specific key event in each terminal 100 input mode and / or operation mode to the key event) Read key data) and / or read a command for executing a predetermined function defined in accordance with the key event. The keypad including the key input unit 120 and at least one key button interlocks with each other to perform a function of a key input unit provided in the terminal 100.

The IEEE 802.11x communication processor 140 is based on the IEEE 802.11x-based wireless communication network and the IEEE 802.11x based on the IEEE 802.11x-based communication protocol of the switching function of the communication protocol stack provided in the terminal 100 Characterized in that the processing of the communication protocol to the wireless communication, and comprises a device configuration including an antenna, RF processing unit, IF processing unit and baseband unit corresponding to the IEEE 802.11x communication standard in hardware, and software A system program (eg, firmware provided in each device configuration) for allowing the RF processor, the IF processor, and the baseband unit to process radio frequency signals transmitted and received through the antenna in correspondence with the IEEE 802.11x based communication protocol. System program included in (or included) the operating system of the terminal 100) It is preferably made, a preferred embodiment thereof will be described in detail with reference to Figure 5b.

The IP-based communication processor 150 performs the TCP / IP (and / or UDP /) through a TCP / IP (and / or UDP / IP) based communication protocol among switching functions of the communication protocol stack provided in the terminal 100. Characterized in that the wired communication through the TCP / IP (and / or UDP / IP) based communication protocol and the network components on the IP-based wired communication network, the hardware in the TCP / IP (and / or UDP /). And a device configuration including a connector, a signal transceiver and a signal processor corresponding to a communication standard, and the TCP / IP signal is transmitted from the signal transceiver and the signal processor to the electrical signal transmitted and received through the connector in software. A system program (e.g., firmware provided in each device configuration, and / or an operating system of the terminal 100) (or / or included) for processing in response to (and / or UDP / IP) based communication protocol. That is comprising a) the system program) is preferred.

Here, the connector is preferably made of at least one connector connected to the UTP (Unshielded Twisted Pair) cable and / or a connector connected to the BNC cable, the signal transmission and reception unit for receiving an electrical signal received through the connector And decoding and / or encoding data (and / or packets) to be transmitted through the connector into an electrical signal, wherein the signal processing unit buffers the decoded data. Extract a packet corresponding to the TCP / IP (and / or UDP / IP) based communication protocol, and / or convert the data to be transmitted into a packet corresponding to the TCP / IP (and / or UDP / IP) based communication protocol It is preferable to include a, and in particular, the signal transmitting and receiving unit and the signal processing unit is the data transmitted and received (and / Or packet) to further perform functions such as retransmission and / or error detection.

Those skilled in the art to which the present invention belongs, the network configuration on the TCP / IP (and / or UDP / IP) based wired communication network through the TCP / IP (and / or UDP / IP) based communication protocol Since it will be familiar with the technical configuration of the element and the IP-based communication processing unit 150 for wired communication through the TCP / IP (and / or UDP / IP) based communication protocol, a detailed description thereof will be omitted for convenience. do.

The memory unit 155 is input / output information when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the terminal 100 is performed. And / or a general term for a memory for storing data; read only memory (ROM) corresponding to read-only memory, flash memory (FM), and electrically erasable and programmable read only memory (EEPROM). ), And a nonvolatile memory including at least one of a hard disk drive (HDD) and the like. In general, the ROM stores system information that should not be deleted, and the nonvolatile memory includes an operating system routine, a communication processing program routine, and / or various application program routines provided through the terminal 100 and information or data therefor. Is stored.

According to the present invention, in order to provide a switching function of the communication protocol stack, the memory unit 155 provides subscriber information and communication parameter information corresponding to at least two or more communication networks to which the terminal 100 can be connected. It is characterized by storing.

Here, the subscriber information is each subscriber information subscribed to at least two communication networks that the terminal 100 can access through the switching function of the communication protocol stack, and the terminal 100 switches the communication protocol stack. Through at least two or more communication networks through the terminal 100 to identify (and / or identify) the subscriber, and comprises the basic information for processing the charge corresponding to the network connection.

Further, the communication parameter information is parameter information for connecting to each communication network according to a communication protocol standard defined in at least two communication networks that the terminal 100 can access through a switching function of the communication protocol stack. In the process of accessing at least two communication networks through the switching function of the communication protocol stack, the method 100 includes basic information defined to transmit and receive with network components on each communication network.

According to the present invention, the memory unit 155 preferably stores a communication program routine for connecting to at least two communication networks to which the terminal 100 can connect in order to provide a switching function of the communication protocol stack. The communication program routine may be loaded into the execution memory of the controller 105 at the same time as the terminal 100 is booted (or through a predetermined communication related command), thereby switching the communication protocol stack. The functional configuration of the communication program routine that provides the function will be described as a block in the control section 105 for convenience.

The IC chip reader unit 125 includes an IC chip related functional configuration (eg, provided in the terminal 100) provided in the terminal 100 through an IC chip standard including ISO / IEC 7816 and / or ISO / IEC 14443. IC chip agent program) and the IC chip mounted on or detached from the terminal 100 to exchange information and / or data. For example, the IC chip reader unit 125 provides information and / or data exchange between the IC chip agent program and the IC chip through an application protocol data unit (APDU).

According to the present invention, the information and / or data exchanged through the IC chip reader unit 125 correspond to at least two or more communication networks to which the terminal 100 can be connected to provide a switching function of the communication protocol stack. Each subscriber information and communication parameter information may be included, and for this purpose, the IC chip may store each subscriber information and communication parameter information corresponding to at least two communication networks to which the terminal 100 can be connected. Do.

Here, the IC chip for storing each subscriber information and communication parameter information corresponding to at least two or more communication networks to which the terminal 100 can be connected includes a subscriber identity module (SIM), a universal identification module (UIM), and a universal subscriber (USIM). Identity Module) may be included, and the present invention is not limited thereto.

Referring to FIG. 3, a communication program routine for providing a switching function of the communication protocol may include at least one of a higher protocol layer on a protocol stack corresponding to at least one wired communication function and / or a wireless communication function included in the terminal 100. A switching unit 170 for logically switching a lower protocol layer corresponding to at least one wired communication protocol and / or a lower protocol layer corresponding to a wireless communication protocol, and the currently connected one of the at least one wired communication network and / or a wireless communication network. And an encryption processing unit 160 for encrypting data to be transmitted through a communication network. When the communication packet including the encrypted data reaches the logical switching control layer, the switching unit 170 includes: Corresponding to the currently connected network It is characterized by providing a switch to the lower protocol layer.

In general, the application program provided in the terminal 100 is characterized in that the interworking with the highest layer on the communication protocol stack, and is manufactured and developed to fully trust the communication protocol stack of the lower layer.

That is, the application program provided in the terminal 100 operates by calling an API (Application Program Interface) function corresponding to the highest layer on the communication protocol stack, and the communication protocol stack of the lower layer is the communication processor (eg, And is operated and controlled by a system program included in the IEEE 802.11x communication processor 140 and / or the IP-based communication processor 150, and / or a system program included in the operating system of the terminal 100. The application does not access the communication protocol stack of the lower layer.

According to the present invention, in the communication protocol structure as described above, the switching unit 170 is at least two or more communication processing units (eg, IEEE 802.11x communication processing unit 140 and / or IP-based communication processing unit provided in the terminal 100) Implement a Logical Switching Control (LSC) layer between a communication protocol layer (eg, physical layer, data link layer) corresponding to 150 and a communication protocol layer provided on an operating system of the terminal 100. Characterized in that.

According to an embodiment of the present invention, the logical switching control layer is included in a predetermined protocol layer on the communication protocol layer provided in the terminal 100 and / or separated into at least two or more protocol layers according to the function of each layer. The present invention is not limited thereto.

According to an embodiment of the present invention, the protocol stack above the logical switching control layer preferably includes a structure included in a hierarchical structure corresponding to the main communication protocol stack corresponding to the terminal 100. The switching control layer controls the upper layer of the layer including the logical switching control layer among the main communication protocol stack included in the terminal 100 to be processed by the main communication protocol stack, and / or the logical switching control layer is The lower layer of the included layer is preferably controlled to be switched to any one of a lower layer of the main communication protocol stack and / or an equivalent lower layer of at least one or more other communication protocol stacks provided in the terminal 100.

For example, if the terminal 100 is a main communication protocol stack is an IEEE 802.11X communication protocol, and the logical switching control layer is provided in a specific layer of the IEEE 802.11X communication protocol layer, then the logical switching control layer is provided. The upper layer of the layer is implemented with the IEEE 802.11X communication protocol layer, and the lower layer of the layer provided with the logical switching control layer includes the lower layer of the IEEE 802.11X communication protocol stack, and also the IEEE 802.11X Lower layers of other communication protocol (e.g., IP-based communication protocol) stacks equivalent to lower layers of the communication protocol stack are included.

In this case, the logical switching control layer may link a lower layer of the IEEE 802.11X communication protocol stack corresponding to a lower layer of the logical switching control layer to an upper layer of the IEEE 802.11X communication protocol stack, and / or the logical switching control. The lower layer of another communication protocol (eg, IP-based communication protocol) stack corresponding to the lower layer is interworked by switching to an upper layer of the IEEE 802.11X communication protocol stack.

Further, for example, if the terminal 100 is a main communication protocol stack is an IP-based communication protocol, and the logical switching control layer is provided in a specific layer of the IP-based communication protocol layer, then the logical switching control layer is provided. The upper layer of the layer is implemented as the IP-based communication protocol layer, the lower layer of the layer provided with the logical switching control layer includes a lower layer of the IP-based communication protocol stack, Lower layers of other communication protocol (e.g., IEEE 802.11x communication protocol) stacks equivalent to lower layers are included.

In this case, the logical switching control layer interworks with a lower layer of the IP-based communication protocol stack corresponding to a lower layer of the logical switching control layer to an upper layer of the IP-based communication protocol stack, and / or lower than the logical switching control layer. Interworking by switching a lower layer of another communication protocol (eg, IEEE 802.11x communication protocol) stack corresponding to the upper layer of the IP-based communication protocol stack.

According to another embodiment of the present invention, the protocol stack above the logical switching control layer preferably comprises a compatible protocol stack structure for at least two or more protocol stacks provided in the terminal 100, the logical switching The protocol stack below the control layer preferably comprises at least two other communication protocol stacks compatible with compatible protocol stacks above the logical switching control layer, wherein the logical switching control layer is the communication protocol stack of the lower layer. It is preferable to control to switch any one of the communication protocol stacks to the compatible protocol stack of the upper layer.

For example, the compatible protocol stack above the logical switching control layer is a protocol stack compatible with an IEEE 802.11x communication protocol stack and / or an IP based communication protocol stack, and the protocol stack below the logical switching control layer is the IEEE 802.11x communication protocol. And the logical switching control layer is compatible with any one of the IEEE 802.11x communication protocol stack and / or the IP based communication protocol stack. Interlock by switching.

According to the present invention, the logical switching control layer corresponding to the switching unit 170 performing the switching function of the communication protocol stack as described above in the communication protocol structure, the upper communication packet generated by the upper protocol stack A lower communication packet corresponding to a lower protocol stack corresponding to a communication network to which the terminal 100 is currently connected, and / or a lower communication corresponding to a lower protocol stack corresponding to a communication network to which the terminal 100 is currently connected. And a communication packet compatible function for converting a packet into an upper communication packet corresponding to the upper protocol stack.

Data to be transmitted from the application program provided in the terminal 100 to the server (and / or terminal 100) on the communication network from the upper layer on the communication protocol layer to the lower layer while the packet information corresponding to each protocol layer is added The lowermost layer (e.g., physical layer) is transferred to the server (and / or terminal 100) via the communication network the communication packet containing at least one packet information corresponding to each layer as described above. In this case, the logical switching control layer is a protocol layer including the logical switching control layer while the packet information corresponding to each protocol layer is added from an upper layer on the communication protocol layer from an application provided in the terminal 100. Lower protocol corresponding to the communication network to which the terminal 100 is currently connected to the transferred packet It is preferable to convert to a structure that can be transferred to the call layer, and to transfer the converted packet to a lower protocol layer corresponding to the communication network to which the terminal 100 is currently connected.

In addition, the data received by the application program provided in the terminal 100 from the server (and / or terminal 100) on the communication network is the upper layer while the packet information corresponding to each protocol layer is removed from the lower layer on the communication protocol layer The uppermost layer provides data to which the packet information is removed from each layer to the application program as described above, wherein the logical switching control layer corresponds to a communication network to which the terminal 100 is currently connected. The packet information corresponding to each protocol layer is removed from the lower protocol layer, and the packet transferred to the protocol layer including the logical switching control layer is converted into a structure that can be transferred to the upper protocol layer. It is desirable to migrate to higher protocol layers.

The encryption processing unit 160 encrypts data to be transmitted through the currently connected communication network among at least one or more wired and / or wireless communication networks through the switching function of the communication protocol stack according to the present invention. Herein, the encryption processing unit 160 encrypts the data among a symmetric key (or secret key) encryption method, and / or a public key encryption method, and / or a full-length envelope encryption method, and / or a key exchange encryption method. It is preferred to be encrypted in at least one way.

According to the exemplary embodiment of the present invention, the encrypted data in the encryption processing unit 160 is included in a predetermined communication packet in the uppermost layer on the communication protocol stack provided in the terminal 100 and provided to a lower layer of the next step. .

As described above, it is preferable that predetermined packet information corresponding to each protocol layer is added to a communication packet provided to a lower layer on the communication protocol stack provided in the terminal 100, and the communication packet is provided on the communication protocol stack. The logical switching control layer is reached.

When the communication packet including the encrypted data reaches the logical switching control layer, the logical switching control layer transmits the communication packet including the encrypted data to the wired communication network (or wireless communication network) to which the terminal 100 is currently connected. Switch to the lower protocol layer corresponding to the communication protocol, the communication packet provided to the lower protocol layer is transmitted to the server (and / or terminal 100) through the wired communication network (or wireless communication network) to which the terminal 100 is currently connected do.

The server (and / or the terminal 100) receiving the communication packet restores the encrypted data from the received communication packet and decrypts (e.g., corresponds to a method of encrypting the data in the terminal 100). , A symmetric key (or secret key) decryption scheme, and / or a public key decryption scheme, and / or a full-length envelope decryption scheme, and / or a key exchange decryption scheme, the encryption scheme used to encrypt the data by the terminal 100. The original data is extracted by decoding using a decoding scheme corresponding to the method.

The protocol control unit 165 controls the logical switching control layer and its lower layer to operate through a protocol layer corresponding to the identified communication network, and the logical switching control layer switches to interwork by switching the lower layer and the upper layer. It is characterized by controlling.

4 is a diagram illustrating a preferred functional configuration of a terminal 100 having a switching function of a communication protocol stack according to another exemplary embodiment of the present invention.

In more detail, FIG. 4 illustrates a terminal 100 having a switching function of a communication protocol stack corresponding to an IEEE 802.16x based wireless communication network and an IP based wired communication network operating based on TCP / IP (and / or UDP / IP). As shown in the preferred functional configuration of the present invention, those of ordinary skill in the art to which the present invention pertains, the switching function of the communication protocol stack corresponding to at least two or more communication networks by referring to and / or modifying the present Figure 4 Various functional configurations of the terminal 100 may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method illustrated in FIG.

In FIG. 1 according to a preferred embodiment of the present invention, a communication network to which a terminal 100 having a switching function of the communication protocol stack is connected includes a wireless communication network including at least one IEEE 802.16x based WLAN communication network, and the like. It is shown to include an IP-based wired communication network operating based on TCP / IP (and / or UDP / IP).

However, the terminal 100 equipped with the switching function of the communication protocol stack according to the present invention can never be connected only to the communication network shown in FIG. 4, and this FIG. 4 shows general knowledge in the technical field to which the present invention belongs. The present invention is only for efficiently explaining the functional configuration of the terminal 100 having the switching function of the communication protocol stack according to the present invention, but is not limited thereto.

Referring to FIG. 4, the terminal 100 having the switching function of the communication protocol stack includes a control unit 105 for controlling and operating the overall function of the terminal 100, and an overall function of the terminal 100. A memory unit 155 for storing information (or data) necessary for control and operation, and / or recording a program necessary for controlling and operating the overall function of the terminal 100, and the terminal 100 for IEEE IEEE 802.16x communication processing unit 145 for processing to communicate with the 802.16x-based wireless communication network, and IP-based communication processing unit 150 for processing the terminal 100 to communicate with the IP-based wired communication network Basically, the screen output unit 110 for the screen output function of the terminal 100, the sound processing unit 115 for the sound input and output function of the terminal 100, and the key input function of the terminal 100 To It provided with a key input unit 120 by default, characterized in that formed.

In addition, the terminal 100 equipped with a switching function of the communication protocol stack stores IC chip storage information (or data) necessary for controlling and operating a characteristic function of the terminal 100, and / or the IC And an IC chip reader unit 125 for interfacing with a predetermined IC chip (and / or IC card) for recording an IC chip program that performs a characteristic function corresponding to chip storage information (or data). do.

In addition, the terminal 100 having a switching function of the communication protocol stack includes a power supply unit 130 (eg, a power supply device and / or a battery, etc.) for supplying power required for the terminal 100 to operate. It is characterized by further comprising.

The control unit 105 includes a processor including a CPU / MPU in hardware and an execution memory (for example, a register and / or a random access memory (RAM)), and from the memory unit 155 to the terminal 100. A predetermined program routine for realizing the overall (and / or characteristic) function of the bus and / or a bus for inputting / outputting the program data and a predetermined electronic circuit (or integrated circuit) provided therefor, And a program routine which is software-loaded from a predetermined memory unit 155 (and / or chipset) into the execution memory to be arithmetic and processed through the processor to realize at least one predefined function. And / or generic term of the program data (hence, in the present invention, a predetermined program recorded on the recording medium of the terminal 100 for the switching function of the communication protocol stack). A gram routine is illustrated as being provided in the control unit 105 for convenience.), Various functions to be implemented in the terminal 100 by the control unit 105 are realized, and the above functions are realized. In order to control and operate the overall operation of the terminal 100.

In particular, when power is input to the terminal 100 to perform a function of the control unit 105 that controls and operates the overall operation of the terminal 100, an operating system routine stored in a predetermined memory unit 155, System management routines and / or system variables are loaded into the execution memory and computed by the processor to perform functions of providing an operating system, system management program, and / or communication service.

The screen output unit 110 drives a predetermined screen output device (for example, a liquid crystal display (LCD) device and / or a cathode ray tube (CRT) device, etc.) included in the terminal 100, and controls the control unit. Predetermined screen output data (for example, screen output data generated by a screen output program routine) generated from the 105, key data generated through the key input unit 120, and predetermined functions provided in the terminal 100; And outputting various information, signals, and / or contents (eg, text contents, image contents, and / or multimedia contents) extracted and / or generated in the process of performing the above operation to the screen output device. The screen output unit 110 includes a driver for outputting the screen output information (and / or data) according to the resolution and / or the number of colors corresponding to the screen output device.

The sound processor 115 drives a sound input device (for example, a microphone) provided in the terminal 100, encodes a predetermined sound signal input from the sound input device, and provides the sound signal to the controller 105. Or / or drives a sound input device (eg, a speaker) provided in the terminal 100, decodes a predetermined sound signal extracted and / or generated by the controller 105, and outputs a sound output device. (For example, a speaker). The sound processor 115 is provided with a predetermined vocoder and a codec. The sound processing unit 115 performs a function of a sound input unit provided in the terminal 100 through the microphone, or the sound output unit provided in the terminal 100 through the sound processing unit 115 and a speaker. Perform the function.

The key input unit 120 includes a predetermined key having at least one key button including a predetermined number key and / or a character key and / or a function key. To detect information (or signals) input from a key input device (eg, a keypad, and / or a keyboard), and to control a specific input mode of the terminal 100 controlled by the controller 105; And / or predetermined information (or signal) is inputted from a predetermined key button provided in the keypad in an operation mode, so that at least one or more key events (eg, MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, MH_KEY_RELEASEEVENT) corresponding to the input information (or signal) are input. ), The generated key event is provided to the controller 105, and the controller 105 is configured to provide the key event in the current input mode and / or operation mode of the terminal 100. Read a predetermined key data corresponding to the (e.g., from the key table to store (manage) at least one or more key data corresponding to a specific key event in each terminal 100 input mode and / or operation mode to the key event) Read key data) and / or read a command for executing a predetermined function defined in accordance with the key event. The keypad including the key input unit 120 and at least one key button interlocks with each other to perform a function of a key input unit provided in the terminal 100.

The IEEE 802.16x communication processor 145 is a network component on the IEEE 802.16x based wireless communication network and the IEEE 802.16x based on an IEEE 802.16x based communication protocol among the switching functions of the communication protocol stack provided in the terminal 100. And a device configuration including an antenna, an RF processing unit, an IF processing unit, and a baseband unit corresponding to the IEEE 802.16x communication standard in hardware. A system program (eg, firmware provided in each device configuration) for allowing the RF processor, the IF processor, and the baseband to process radio frequency signals transmitted and received through an antenna corresponding to the IEEE 802.16x based communication protocol. System programs included in (or included) the operating system of the terminal 100) It is preferably made, a preferred embodiment thereof will be described in detail with reference to Figure 5b.

The IP-based communication processor 150 performs the TCP / IP (and / or UDP /) through a TCP / IP (and / or UDP / IP) based communication protocol among switching functions of the communication protocol stack provided in the terminal 100. Characterized in that the wired communication through the TCP / IP (and / or UDP / IP) based communication protocol and the network components on the IP-based wired communication network, the hardware in the TCP / IP (and / or UDP /). And a device configuration including a connector, a signal transceiver and a signal processor corresponding to a communication standard, and the TCP / IP signal is transmitted from the signal transceiver and the signal processor to the electrical signal transmitted and received through the connector in software. A system program (e.g., firmware provided in each device configuration, and / or an operating system of the terminal 100) (or / or included) for processing in response to (and / or UDP / IP) based communication protocol. That is comprising a) the system program) is preferred.

Here, the connector preferably comprises at least one connector connected to the UTP (Unshielded Twisted Pair) cable and / or a connector connected to the BNC cable, wherein the signal transmission and reception unit decodes the electrical signal received through the connector And / or encoding data (and / or packets) to be transmitted through the connector into an electrical signal, wherein the signal processing unit buffers the decoded data to Extract a packet corresponding to a TCP / IP (and / or UDP / IP) based communication protocol, and / or extract the packet corresponding to the TCP / IP (and / or UDP / IP) based communication protocol. It is preferable to include the generating, and in particular, the signal transmission and reception unit and the signal processing unit / Or packet) to further perform functions such as retransmission and / or error detection.

Those skilled in the art to which the present invention belongs, the network configuration on the TCP / IP (and / or UDP / IP) based wired communication network through the TCP / IP (and / or UDP / IP) based communication protocol Since it will be familiar with the technical configuration of the element and the IP-based communication processing unit 150 for wired communication through the TCP / IP (and / or UDP / IP) based communication protocol, a detailed description thereof will be omitted for convenience. do.

The memory unit 155 is input / output information when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the terminal 100 is performed. And / or a general term for a memory for storing data; read only memory (ROM) corresponding to read-only memory, flash memory (FM), and electrically erasable and programmable read only memory (EEPROM). ), And a nonvolatile memory including at least one of a hard disk drive (HDD) and the like. In general, the ROM stores system information that should not be deleted, and the nonvolatile memory includes an operating system routine, a communication processing program routine, and / or various application program routines provided through the terminal 100 and information or data therefor. Is stored.

According to the present invention, in order to provide a switching function of the communication protocol stack, the memory unit 155 provides subscriber information and communication parameter information corresponding to at least two or more communication networks to which the terminal 100 can be connected. It is characterized by storing.

Here, the subscriber information is each subscriber information subscribed to at least two communication networks that the terminal 100 can access through the switching function of the communication protocol stack, and the terminal 100 switches the communication protocol stack. Through at least two or more communication networks through the terminal 100 to identify (and / or identify) the subscriber, and comprises the basic information for processing the charge corresponding to the network connection.

Further, the communication parameter information is parameter information for connecting to each communication network according to a communication protocol standard defined in at least two communication networks that the terminal 100 can access through a switching function of the communication protocol stack. In the process of accessing at least two communication networks through the switching function of the communication protocol stack, the method 100 includes basic information defined to transmit and receive with network components on each communication network.

According to the present invention, the memory unit 155 preferably stores a communication program routine for connecting to at least two communication networks to which the terminal 100 can connect in order to provide a switching function of the communication protocol stack. The communication program routine may be loaded into the execution memory of the controller 105 at the same time as the terminal 100 is booted (or through a predetermined communication related command), thereby operating the communication protocol stack. The functional configuration of the communication program routine that provides the switching function will be described as a block in the controller 105 for convenience.

The IC chip reader unit 125 includes an IC chip related functional configuration (eg, provided in the terminal 100) provided in the terminal 100 through an IC chip standard including ISO / IEC 7816 and / or ISO / IEC 14443. IC chip agent program) and the IC chip mounted on or detached from the terminal 100 to exchange information and / or data. For example, the IC chip reader unit 125 provides information and / or data exchange between the IC chip agent program and the IC chip through an application protocol data unit (APDU).

According to the present invention, the information and / or data exchanged through the IC chip reader unit 125 correspond to at least two or more communication networks to which the terminal 100 can be connected to provide a switching function of the communication protocol stack. Each subscriber information and communication parameter information may be included, and for this purpose, it is preferable that each subscriber information and communication parameter information corresponding to at least two or more communication networks to which the terminal 100 can be connected are stored in the IC chip. .

Here, the IC chip for storing each subscriber information and communication parameter information corresponding to at least two or more communication networks to which the terminal 100 can be connected includes a subscriber identity module (SIM), a universal identification module (UIM), and a universal subscriber (USIM). Identity Module) may be included, and the present invention is not limited thereto.

Referring to FIG. 4, a communication program routine for providing a switching function of the communication protocol may include at least one of a higher protocol layer on a protocol stack corresponding to at least one wired communication function and / or a wireless communication function provided in the terminal 100. A switching unit 170 for logically switching a lower protocol layer corresponding to at least one wired communication protocol and / or a lower protocol layer corresponding to a wireless communication protocol, and the currently connected one of the at least one wired communication network and / or a wireless communication network. And an encryption processing unit 160 for encrypting data to be transmitted through a communication network. When the communication packet including the encrypted data reaches the logical switching control layer, the switching unit 170 includes: Corresponding to the communication network to which the communication packet is currently connected. It is characterized by providing a switch to the lower protocol layer.

In general, the application program provided in the terminal 100 is characterized in that the interworking with the top layer on the communication protocol stack, and is manufactured and developed to fully trust the communication protocol stack of the lower layer.

That is, the application program provided in the terminal 100 operates by calling an API (Application Program Interface) function corresponding to the highest layer on the communication protocol stack, and the communication protocol stack of the lower layer is the communication processor (eg, And a system program provided in the IEEE 802.16x communication processor 145 and / or the IP based communication processor 150, and / or a system program provided in the operating system of the terminal 100. The application does not access the communication protocol stack of the lower layer.

According to the present invention, in the communication protocol structure as described above, the switching unit 170 is at least two or more communication processing units (eg, IEEE 802.16x communication processing unit 145 and / or IP-based communication processing unit provided in the terminal 100) Implement a Logical Switching Control (LSC) layer between a communication protocol layer (eg, physical layer, data link layer) corresponding to 150 and a communication protocol layer provided on an operating system of the terminal 100. Characterized in that.

According to an embodiment of the present invention, the logical switching control layer is included in a predetermined protocol layer on the communication protocol layer provided in the terminal 100 and / or separated into at least two or more protocol layers according to the function of each layer. The present invention is not limited thereto.

According to an embodiment of the present invention, the protocol stack above the logical switching control layer preferably includes a structure included in a hierarchical structure corresponding to the main communication protocol stack corresponding to the terminal 100. The switching control layer controls the upper layer of the layer including the logical switching control layer among the main communication protocol stack included in the terminal 100 to be processed by the main communication protocol stack, and / or the logical switching control layer is The lower layer of the included layer is preferably controlled to be switched to any one of a lower layer of the main communication protocol stack and / or an equivalent lower layer of at least one or more other communication protocol stacks provided in the terminal 100.

For example, if the terminal 100 is a main communication protocol stack of the IEEE 802.16X communication protocol, and the logical switching control layer is provided in a specific layer of the IEEE 802.16X communication protocol layer, the logical switching control layer is provided at this time The upper layer of the layer is implemented with the IEEE 802.16X communication protocol layer, and the lower layer of the layer provided with the logical switching control layer includes a lower layer of the IEEE 802.16X communication protocol stack, and also the IEEE 802.16X communication. Lower layers of other communication protocol (e.g., IP-based communication protocol) stacks equivalent to lower layers of the protocol stack are included.

In this case, the logical switching control layer may link a lower layer of the IEEE 802.16X communication protocol stack corresponding to a lower layer of the logical switching control layer to an upper layer of the IEEE 802.16X communication protocol stack, and / or the logical switching control. A lower layer of another communication protocol (eg, IP-based communication protocol) stack corresponding to the lower layer is interworked by switching to an upper layer of the IEEE 802.16X communication protocol stack.

Further, for example, if the terminal 100 is a main communication protocol stack is an IP-based communication protocol, and the logical switching control layer is provided in a specific layer of the IP-based communication protocol layer, then the logical switching control layer is provided. The upper layer of the layer is implemented as the IP-based communication protocol layer, the lower layer of the layer provided with the logical switching control layer includes a lower layer of the IP-based communication protocol stack, Lower layers of other communication protocol (e.g., IEEE 802.16x communication protocol) stacks equivalent to lower layers are included.

In this case, the logical switching control layer interworks with a lower layer of the IP-based communication protocol stack corresponding to a lower layer of the logical switching control layer to an upper layer of the IP-based communication protocol stack, and / or is lower than the logical switching control layer. Interworking by switching a lower layer of another communication protocol (eg, IEEE 802.16x communication protocol) stack corresponding to the upper layer of the IP-based communication protocol stack.

According to another embodiment of the present invention, the protocol stack above the logical switching control layer preferably comprises a compatible protocol stack structure for at least two or more protocol stacks provided in the terminal 100, the logical switching The protocol stack below the control layer preferably comprises at least two other communication protocol stacks compatible with compatible protocol stacks above the logical switching control layer, wherein the logical switching control layer is the communication protocol stack of the lower layer. It is preferable to control to switch any one of the communication protocol stacks to the compatible protocol stack of the upper layer.

For example, the compatible protocol stack above the logical switching control layer is a protocol stack compatible with an IEEE 802.16x communication protocol stack and / or an IP-based communication protocol stack, and the protocol stack below the logical switching control layer is the IEEE 802.16x communication protocol. The logical switching control layer, if any one of the stack and / or the IP-based communication protocol stack comprises a compatible protocol stack of the upper and the compatible protocol stack of any of the IEEE 802.16x communication protocol stack and / or IP-based communication protocol stack Switch to interlock.

According to the present invention, the logical switching control layer corresponding to the switching unit 170 performing the switching function of the communication protocol stack as described above in the communication protocol structure, the upper communication packet generated by the upper protocol stack A lower communication packet corresponding to a lower protocol stack corresponding to a communication network to which the terminal 100 is currently connected, and / or a lower protocol stack corresponding to a lower protocol stack corresponding to a communication network to which the terminal 100 is currently connected. And a communication packet compatible function for converting a communication packet into an upper communication packet corresponding to the upper protocol stack.

Data to be transmitted from the application program provided in the terminal 100 to the server (and / or terminal 100) on the communication network from the upper layer on the communication protocol layer to the lower layer while the packet information corresponding to each protocol layer is added The lowermost layer (e.g., physical layer) is transferred to the server (and / or terminal 100) via the communication network the communication packet containing at least one packet information corresponding to each layer as described above. In this case, the logical switching control layer is a protocol layer including the logical switching control layer while the packet information corresponding to each protocol layer is added from an upper layer on the communication protocol layer from an application provided in the terminal 100. Lower protocol corresponding to the communication network to which the terminal 100 is currently connected to the transferred packet It is preferable to convert to a structure that can be transferred to the call layer, and to transfer the converted packet to a lower protocol layer corresponding to the communication network to which the terminal 100 is currently connected.

In addition, the data received by the application program provided in the terminal 100 from the server (and / or terminal 100) on the communication network as the packet information corresponding to each protocol layer is removed from the lower layer on the communication protocol layer The uppermost layer is transferred to the upper layer, and the uppermost layer provides data to which the respective packet information is removed from each layer as described above to the application program, wherein the logical switching control layer is connected to the communication network to which the terminal 100 is currently connected. The packet information corresponding to each protocol layer is removed from the corresponding lower protocol layer, and the packet transferred to the protocol layer including the logical switching control layer is converted into a structure capable of transferring to the upper protocol layer, and the converted packet Is preferably transferred to the higher protocol layer.

The encryption processing unit 160 encrypts data to be transmitted through the currently connected communication network among at least one or more wired and / or wireless communication networks through the switching function of the communication protocol stack according to the present invention. Herein, the encryption processing unit 160 encrypts the data among a symmetric key (or secret key) encryption method, and / or a public key encryption method, and / or a full-length envelope encryption method, and / or a key exchange encryption method. It is preferred to be encrypted in at least one way.

According to the exemplary embodiment of the present invention, the encrypted data in the encryption processing unit 160 is included in a predetermined communication packet in the uppermost layer on the communication protocol stack provided in the terminal 100 and provided to a lower layer of the next step. .

As described above, it is preferable that predetermined packet information corresponding to each protocol layer is added to a communication packet provided to a lower layer on the communication protocol stack provided in the terminal 100, and the communication packet is provided on the communication protocol stack. The logical switching control layer is reached.

When the communication packet including the encrypted data reaches the logical switching control layer, the logical switching control layer transmits the communication packet including the encrypted data to the wired communication network (or wireless communication network) to which the terminal 100 is currently connected. Switch to the lower protocol layer corresponding to the communication protocol, the communication packet provided to the lower protocol layer is transmitted to the server (and / or terminal 100) through the wired communication network (or wireless communication network) to which the terminal 100 is currently connected do.

The server (and / or the terminal 100) receiving the communication packet restores the encrypted data from the received communication packet and decrypts (e.g., corresponds to a method of encrypting the data in the terminal 100). , A symmetric key (or secret key) decryption scheme, and / or a public key decryption scheme, and / or a full-length envelope decryption scheme, and / or a key exchange decryption scheme, the encryption scheme used to encrypt the data by the terminal 100. A corresponding decoding method) to extract the original data.

The protocol control unit 165 controls the logical switching control layer and its lower layer to operate through a protocol layer corresponding to the identified communication network, and the logical switching control layer interworks by switching the lower layer and the upper layer. It characterized in that the control to.

5A, 5B, and 5C are diagrams showing a preferred configuration diagram of a communication processing device configuration included in the terminal 100 according to one embodiment of the present invention.

In more detail, FIGS. 5A, 5B, and 5C illustrate a terminal 100 having an integrated processing function of the communication protocol stack illustrated in FIGS. 2 and / or 3 and / or 4. ) Is an independent device configuration diagram for a communication processing device configuration corresponding to a wireless communication network to which a) can be connected. Specifically, FIG. 5A illustrates W-CDMA and / or HSDPA based operation of the terminal 100 based on a CDMA stack. FIG. 5B shows an embodiment of an independent device configuration for accessing a wireless communication network, and FIG. 5B shows an embodiment of an independent device configuration for accessing an IEEE 802.11x-based wireless communication network. FIG. 5C illustrates an embodiment of an independent device configuration for the terminal 100 to access an IEEE 802.16x based wireless communication network.

Those skilled in the art to which the present invention pertains can refer to and / or modify the drawings 5a, 5b, and 5c to implement various methods of configuring an independent communication processing device corresponding to each wireless communication network. For example, an integrated chip method may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation methods illustrated in FIGS. 5A, 5B, and 5C.

Referring to FIG. 5A corresponding to an independent device configuration for the terminal 100 to access a W-CDMA and / or HSDPA-based wireless communication network operating based on a CDMA stack, the device configuration of the WCDMA / HSDPA-based communication processor Is an antenna for WCDMA / HSDPA-based wireless communication, an RF processor for processing a WCDMA / HSDPA-based radio frequency signal transmitted and received through the antenna, and an IF processor for processing the radio frequency signal processed by the RF processor at an intermediate frequency. And a baseband unit for converting the intermediate frequency signal processed by the IF processing unit into a baseband signal.

According to an embodiment of the present invention, the baseband portion of the device configuration of the WCDMA / HSDPA-based communication processing unit is shown to be processed in a predetermined integrated chip (eg, MSM chip supplied by Qualcomm, Inc.), but the present invention is limited by this. It never happens.

Referring to FIG. 5B, which corresponds to an independent device configuration for the terminal 100 to access an IEEE 802.11x-based wireless communication network, the device configuration of the IEEE 802.1x-based communication processing unit is a device configuration of the IEEE 802.11x-based communication processing unit. Is an antenna for IEEE 802.11x based wireless communication, an RF processor for processing an IEEE 802.11x based radio frequency signal transmitted and received through the antenna, and an IF for processing an intermediate frequency of the radio frequency signal processed by the RF processor. And a baseband unit for converting the intermediate frequency signal processed by the IF processor into a baseband signal.

Referring to FIG. 5B, although the MAC processing unit is further configured to process the miracle band signal processed by the device-based baseband unit of the IEEE 802.1x-based communication processing unit as MAC data, the MAC processing unit is configured to include the terminal. It may be processed in the form of a system program on the operating system provided in (100), whereby the present invention is not limited.

Referring to FIG. 5C corresponding to an independent device configuration for the terminal 100 to access an IEEE 802.16x based wireless communication network, the device configuration of the IEEE 802.16x based communication processing unit includes an antenna for IEEE 802.16x based wireless communication. An RF processor for processing an IEEE 802.16x based radio frequency signal transmitted and received through the antenna, an IF processor for processing the radio frequency signal processed by the RF processor as an intermediate frequency, and an intermediate frequency processed by the IF processor And a baseband portion for converting the signal into a baseband signal.

The device configuration shown in FIG. 5c performs an up / down conversion function between an RF front end (FE) and a power amplification RF signal based on the antenna, the RF processing unit, the IF processing unit, and the baseband unit. Front End Module is composed of PA (Power Amplifier), RFSW (RF SWitch), and LNA (Low Noise Amplifier) FEM to convert the transmit / receive mode according to the control signal, power amplifier function of transmit signal, and low noise amplifier function of received signal. UPCM (UP Conversion Module) is composed of LPF, I / Q modulator, VGA, RF BPF and performs upconversion of baseband signal to RF signal, transmission power control function and filtering function -Conversion Module) is composed of RF BPF, RF mixer, VGA, I / Q demodulator, LPF, and DNCM is used to perform down conversion of RF signal to baseband signal, automatic gain control and filtering of received power. Device configuration is made.

In addition, the device configuration of the IEEE 802.16x-based communication processing unit includes a local oscillator module (LOM) consisting of a PLL and an RF VCO and a TDD scheme, and thus includes an antenna module (ANTM) that performs transmission and reception on the same antenna.

According to an exemplary embodiment of the present invention, the terminal 100 equipped with the integrated processing function of the protocol stack may be separately provided with each wireless communication device configuration shown in FIGS. 5A, 5B, and 5C. Thereby, this invention is not limited.

According to an exemplary embodiment of the present invention, the terminal 100 having the integrated processing function of the protocol stack may be provided so that some of the respective wireless communication device configurations shown in FIGS. 5A, 5B, and 5C are shared. The present invention is not limited thereby.

Hereinafter, the communication protocol stack of the communication protocol stack based on a wireless communication network and / or a wired communication network corresponding to an IP based and / or an IP compatible communication network supporting a communication protocol compatible with OSI 7 layer among various communication protocols. The technical features of the terminal 100 equipped with the integrated processing function will be described.

However, the present invention is not only applied to a communication protocol compatible with the Open Systems Interconnection (OSI) layer 7, and a person of ordinary skill in the art to which the present invention pertains, will be described below. The technical characteristics of the terminal 100 equipped with the integrated processing function of the communication protocol stack according to the present invention may be inferred corresponding to each communication protocol including a hierarchical structure through the present invention. It includes a method, and is not limited to the implementation method shown below.

6A, 6B, 6C, and 6D illustrate a logical switching control hierarchy providing integrated processing of a communication protocol stack according to an embodiment of the present invention.

6a, 6b, 6c, and 6d show an integrated processing function of the communication protocol stack according to the present invention on an IEEE 802.11x based communication protocol stack and / or an IP based communication protocol stack compatible with the OSI 7 layer. A method of implementing a logical switching control layer for providing an embodiment of the present invention, specifically, FIG. 6A illustrates an upper layer (and / or sublayer of a network layer) of a data link layer on a communication protocol compatible with the OSI 7 layer. FIG. 6B illustrates an implementation method in which a logical switching control layer is provided to provide integrated processing functions of a communication protocol stack, and FIG. 6B illustrates an upper layer (and / or a part of a transport layer) of a network layer on a communication protocol compatible with the OSI 7 layer. Layer) is provided with a logical switching control layer providing integrated processing of the communication protocol stack. FIG. 6C illustrates a logical switching control providing integrated processing of the communication protocol stack to an upper layer (and / or sublayer of a session layer) of a transport layer on a communication protocol compatible with the OSI 7 layer. 6D shows an integrated method of the communication protocol stack in an upper layer (and / or a sublayer of a presentation layer) of a session layer on a communication protocol compatible with the OSI 7 layer. A method of implementing a logical switching control layer is provided.

Those skilled in the art to which the present invention pertains, IEEE 802.11x based communication protocol stack and / or compatible with the OSI 7 layer with reference to and / or modified with reference to Figures 6a, 6b, 6c and 6d. Or various implementation methods having a logical switching control layer providing an integrated processing function of the communication protocol stack according to the present invention on an IP-based communication protocol stack (eg, at least two or more layers are separated by functions). It can be inferred, but the present invention includes all the inferred implementation method, and is not limited to the implementation method shown in Figures 6a and 6b and 6c and 6d.

Also, those skilled in the art may refer to and / or modify the drawings 6a, 6b, 6c, and 6d to present the invention on another communication protocol stack that is incompatible with the OSI 7 layer. While various implementations may be inferred with a logical switching control layer providing integrated processing of a communication protocol stack in accordance with the present invention, the present invention encompasses all of the inferred implementations, including FIGS. 6A, 6B and 6B. It is not limited to the implementation method shown in 6c and FIG. 6d.

In addition, those skilled in the art to which the present invention pertains may refer to and / or modify the present figures 6a, 6b, 6c and 6d, and the communication protocol stack and the OSI 7 layer compatible with the OSI 7 layer. It would be possible to infer a variety of implementations having a logical switching control layer on the incompatible communications protocol stack that provides the integrated processing of the communications protocol stack according to the invention, but the present invention includes all such inferred implementation methods. The present invention is not limited to the embodiment shown in FIGS. 6A, 6B, 6C, and 6D.

6A, 6B, 6C, and 6D, the OSI 7 hierarchical structure configures and maintains a physical link to enable data communication through a predetermined communication network, and a communication line corresponding to the physical link. A physical layer that defines the mechanical, electrical, functional, and procedural characteristics for establishing and / or maintaining and / or breaking circuit connections for direct transmission of data bits through Once the link is established, the physical layer is controlled to define functions for data delivery reliability such as addressing, network topology, circuit usage rules, error detection, frame forwarding and flow control for the physical link. A network between a datalink layer and at least two communication systems that are physically connected through the communication network. Network Layer, which defines error control, flow control and multiplexing functions to provide path selection and connectivity, and virtual circuit construction, path maintenance, termination, and transmission for reliability of data transmission. And a transport layer that provides error detection, recovery, and flow control, wherein the physical layer, the data link layer, the network layer, and the transport layer provide reliability of data transmitted and received through a predetermined communication network. It is desirable to be defined for the primary purpose of the transmission.

In the OSI 7 hierarchical structure, the network layer further performs a function of correcting that an order of a packet is changed or an error occurs, and TCP and / or UDP are defined in the network layer.

According to an embodiment of the present invention, in the OSI 7 hierarchical structure, the physical layer and the data link layer include a hardware device configuration of a communication processing unit provided in the terminal 100 and / or correspond to the communication device configuration. It is preferable to include a firmware, so that the logical switching control layer providing the integrated processing function of the communication protocol stack according to the present invention is preferably defined above the physical layer and the data link layer.

According to another embodiment of the present invention, a logical switching control layer providing integrated processing function of the communication protocol stack may be made in the form of firmware and defined in the datalink layer and / or physical layer, whereby the present invention It is not limited.

6A, 6B, 6C, and 6D, the OSI 7 hierarchical structure provides a function of configuring, managing, and terminating a communication session between applications provided in at least two communication systems connected through a predetermined communication network. A session layer defining a presentation layer, a presentation layer defining data conversion, compression, and encryption / decryption functions between applications provided in at least two communication systems connected through a predetermined communication network; And an application layer corresponding to an application program included in at least two communication systems connected through a communication network.

According to an embodiment of the present invention, the session layer and / or the presentation layer and / or the application layer may be integrated into one layer according to the functional characteristics of the terminal 100 providing the integrated processing function of the communication protocol stack. As such, the present invention is not limited thereto.

6A, 6B, 6C, and 6D, the terminal 100 includes a physical layer corresponding to the IEEE 802.11x standard to provide access and communication connection to the IEEE 802.11x-based communication network. And a data link layer including a media access control (MAC) layer and a logical link control (LLC) layer corresponding to the IEEE 802.11x standard.

The physical layer corresponding to the IEEE 802.11x standard includes a PHY Convergence Layer (PCL) layer (not shown) and a Physical Medium Dependent (PMD) layer (not shown), and include a direct sequence spread spectrum (Direct Sequence Spread Spectrum); A network component (eg, an access point (AP)) on the terminal 100 and an IEEE 802.11x-based wireless communication network through at least one or more of a DSSS scheme and / or an Orthogonal Frequency Division Multiplexing (OFDM) scheme. Etc.) and a wireless communication section, wherein the wireless communication section includes at least one server (and / or terminal 100 through a wired communication section including a backbone network corresponding to the IEEE 802.11x-based wireless communication network). )) And physically connected.

The MAC layer included in the data link layer corresponding to the IEEE 802.11x standard may include carrier sense multiple access / collision avoidance (CDMA / CA) and / or time division multiple access / time division duplex (TDMA / TDD) on the data link layer. At least one of the media access control functions.

The LLC layer included in the data link layer corresponding to the IEEE 802.11x standard provides a connection between communication systems existing on a local area network (LAN) according to the IEEE 802.2 standard. In order to provide a function of a wireless LAN), it is provided above the MAC layer of the data link layer.

The LLC layer includes three characteristics: LLC1 cannot correct errors at the connection level, LLC2 can correct errors, LLC3 provides immediate recognition, and LLC3 must control time-critical processing. Can be used in the environment.

Those skilled in the art will be familiar with the technical features of the MAC layer and LLC layer included in the physical layer and the data link layer with reference to the IEEE 802.11x communication protocol specification. A detailed description of the physical layer and the data link layer corresponding to the IEEE 802.11x communication protocol standard will be omitted for convenience.

6A, 6B, 6C, and 6D, the terminal 100 connects to the TCP / IP (and / or UDP / IP) based communication network and provides a communication connection. An Ethernet physical layer comprising IP (and / or UDP / IP) and a datalink layer comprising an Ethernet MAC layer comprising said TCP / IP (and / or UDP / IP) Characterized in that made.

The physical layer corresponding to the TCP / IP (and / or UDP / IP) standard includes a network interface card (NIC) and / or a high speed internet device (eg, a cable communication modem, and / or an ADSL) provided in the terminal 100. Hub connected to a network component (e.g., the NIC through a UTP cable) through a symmetric digital subscriber line (Asymmetric Digital Subscriber Line) communication modem, and / or a very high-data rate digital subscriber line (VDSL) communication modem, etc. And / or a router (Router), an Internet Service Provider (ISP) device connected to the broadband Internet device through a predetermined BNC cable), and a wired communication section, wherein the wired communication section is the backbone. It is characterized in that it is physically connected to at least one server (and / or terminal 100) through a wired communication interval including a network.

The MAC layer included in the data link layer corresponding to the TCP / IP (and / or UDP / IP) standard performs a medium access control function defined in the IEEE 802.3 standard, and at least corresponds to the physical layer. It consists of one or more sublayers.

Those skilled in the art to which the present invention pertains may include technical features of the MAC layer included in the physical layer and the data link layer with reference to the TCP / IP (and / or UDP / IP) communication protocol specification. As will be understood, detailed descriptions of the physical layer and the data link layer corresponding to the TCP / IP (and / or UDP / IP) communication protocol specification will be omitted for convenience.

Referring to FIG. 6A, the logical switching control layer is provided in an upper layer (and / or a sublayer included in a network layer) of the datalink layer, and is in an upper layer (and / or in the datalink layer). Switching the application layer and / or presentation layer and / or session layer and / or transport layer on the communication protocol stack to the IEEE 802.11x based datalink layer and / or physical layer in the network layer). Or switch to a TCP / IP (and / or UDP / IP) based datalink layer and / or a physical layer.

In addition, the logical switching control layer provided in an upper layer (and / or sub-layer included in the network layer) of the data link layer may be provided through a presentation layer, a session layer, and a transport layer at an application layer on the communication protocol stack. Switching the communication packet provided to the network layer to the IEEE 802.11x based data link layer and / or physical layer, or to a TCP / IP (and / or UDP / IP) based data link layer and / or physical layer. Accordingly, the communication packet provided from the application layer to the network layer through the presentation layer, the session layer, and the transport layer is transmitted through an IEEE 802.11x-based wireless communication network, or TCP / IP (currently connected to the terminal 100). And / or UDP / IP) based wired communication network.

The logical switching control layer provided in an upper layer (and / or a sublayer included in a network layer) of the data link layer may include an IEEE 802.11x-based physical layer corresponding to a communication network to which the terminal 100 is currently connected. A communication packet received from the TCP / IP (and / or UDP / IP) based physical layer corresponding to a communication network to which the terminal 100 is currently connected, and / or provided to the IEEE 802.11x based data link layer. Switching the communication packet provided to the TCP / IP (and / or UDP / IP) based data link layer to the upper layer through the network layer, thereby receiving from the communication network to which the terminal 100 is currently connected The communication packet is passed through the transport layer, the session layer, and the presentation layer through the network layer including the logical switching control layer. It is received into layers.

In FIG. 6A, the logical switching control layer is illustrated as a sub-layer provided above the network layer for convenience. However, the logical switching control layer is a sub-layer existing between the network layer and the data link layer. It may be a sublayer provided below the network layer, whereby the present invention is not limited.

Referring to FIG. 6B, the logical switching control layer is provided in an upper layer (and / or a sublayer included in a transport layer) of the network layer, and is in an upper layer (and / or transport layer) of the network layer. Switch an application layer and / or a presentation layer and / or a session layer on the communication protocol stack to a network layer provided above the IEEE 802.11x-based physical layer and / or datalink layer through the transport layer. And switching to a network layer provided on a TCP / IP (and / or UDP / IP) based physical layer and / or a data link layer.

In addition, the logical switching control layer provided in an upper layer (and / or sub-layer included in the transport layer) of the network layer, the transport layer through the presentation layer and the session layer in the application layer on the communication protocol stack Switches the communication packet provided to the network layer provided above the IEEE 802.11x-based physical layer and / or data link layer, or the TCP / IP (and / or UDP / IP) -based physical layer and / or data link layer. And switching to a network layer provided at a higher level, whereby the communication packet provided from the application layer to the transport layer through the presentation layer and the session layer is currently accessed by the terminal 100 via the network layer. IEEE 802.11x-based wireless network, or TCP / IP (and / or UDP / IP) based wired network It is transmitted over a communication network.

In addition, the logical switching control layer provided in an upper layer (and / or sub-layer included in the transport layer) of the network layer is from an IEEE 802.11x-based physical layer corresponding to a communication network to which the terminal 100 is currently connected. A communication packet received and provided to the network layer through the IEEE 802.11x based data link layer, and / or a TCP / IP (and / or UDP / IP) based physical layer corresponding to a communication network to which the terminal 100 is currently connected. And a communication packet received from the communication layer provided to the network layer through the TCP / IP (and / or UDP / IP) based data link layer, to the upper layer through the transport layer. The communication packet received from the communication network to which 100 is currently connected is transmitted to the session layer and the presentation through the transport layer including the logical switching control layer. It is received by the application layer via the application layer.

In FIG. 6B, the logical switching control layer is illustrated as a sub-layer provided above the transport layer for convenience, but the logical switching control layer is a sub-layer existing between the transport layer and the network layer, and / or the transmission. It may be a sublayer provided below the hierarchy, and the present invention is not limited thereby.

Referring to FIG. 6C, the logical switching control layer is provided in an upper layer (and / or a sublayer included in a session layer) of the transport layer, and is in a higher layer (and / or session layer) of the transport layer. Switch an application layer and / or a presentation layer on the communication protocol stack to a transport layer above a network layer provided above the IEEE 802.11x-based physical layer and / or datalink layer through the session layer, And switching to a transport layer above a network layer provided on a TCP / IP (and / or UDP / IP) based physical layer and / or a data link layer.

In addition, the logical switching control layer provided in the upper layer (and / or sub-layer included in the session layer) of the transport layer, the communication packet provided to the session layer through the presentation layer in the application layer on the communication protocol stack Switching to a transport layer above the network layer provided above the IEEE 802.11x-based physical layer and / or data link layer, or a TCP / IP (and / or UDP / IP) based physical layer and / or data link layer And switching to a transport layer above the network layer provided at a higher level, whereby the communication packet provided from the application layer to the session layer through the presentation layer passes through the transport layer and the network layer. IEEE 802.11x based wireless network currently connected), TCP / IP (and / or UDP / IP) based wired network Is transmitted through any one of the communication networks.

In addition, the logical switching control layer provided in an upper layer (and / or sublayer included in the session layer) of the transport layer is from an IEEE 802.11x-based physical layer corresponding to a communication network to which the terminal 100 is currently connected. A communication packet received and provided to the transport layer via the IEEE 802.11x based data link layer, and / or TCP / IP (and / or UDP /) corresponding to the communication network to which the terminal 100 is currently connected. Switching a communication packet received from an IP) based physical layer to the transport layer via the TCP / IP (and / or UDP / IP) based datalink layer and to the transport layer through the session layer to a higher layer. Thus, the communication packet received from the communication network to which the terminal 100 is currently connected is the three including the logical switching control layer. Via the presentation layer it is received by the application layer through the layer.

In FIG. 6C, the logical switching control layer is illustrated as a sub-layer provided above the session layer for convenience, but the logical switching control layer is a sub-layer existing between the session layer and the transport layer and / or the session. It may be a sublayer provided below the hierarchy, and the present invention is not limited thereby.

Referring to FIG. 6D, the logical switching control layer is provided in an upper layer (and / or a sublayer included in a presentation layer) of the session layer, and is in an upper layer (and / or presentation) of the session layer. Switching an application layer on the communication protocol stack to a session layer on a transport layer above a network layer provided on the IEEE 802.11x-based physical layer and / or a datalink layer through the presentation layer; And switching to a session layer above a transport layer above a network layer provided on a TCP / IP (and / or UDP / IP) based physical layer and / or a data link layer.

The logical switching control layer provided in an upper layer (and / or a sublayer included in a presentation layer) of the session layer may include a communication packet provided from the application layer on the communication protocol stack to the presentation layer. Switching to a session layer above a transport layer above the network layer provided on an IEEE 802.11x-based physical layer and / or a datalink layer, or a TCP / IP (and / or UDP / IP) based physical layer and / or a datalink And switching to a session layer above a transport layer located above the network layer, whereby a communication packet provided from the application layer to the presentation layer passes through the session layer, the transport layer, and the network layer. IEEE 802.11x-based wireless communication network, or TCP / IP (and / It is transmitted through one of the UDP / IP) based wired communication network a communication network.

The logical switching control layer provided in an upper layer (and / or a sublayer included in a presentation layer) of the session layer may include an IEEE 802.11x-based physical layer corresponding to a communication network to which the terminal 100 is currently connected. A communication packet received from and provided to the transport layer and the session layer through the network layer via the IEEE 802.11x based datalink layer, and / or TCP / IP corresponding to the communication network to which the terminal 100 is currently connected (and And / or a communication packet received from the UDP / IP based physical layer and provided to the transport layer and the session layer via the TCP / IP (and / or UDP / IP) based data link layer via the network layer. And switching to a higher layer through the layer, whereby the communication packet received from the communication network to which the terminal 100 is currently connected. Through the presentation file that contains the logical switching the control layer is received by the application layer.

In FIG. 6D, the logical switching control layer is illustrated as a sub-layer provided above the presentation layer for convenience, but the logical switching control layer is a sub-layer existing between the presentation layer and the session layer, and / or The sublayer provided below the presentation layer may be used, and the present invention is not limited thereto.

7A, 7B, 7C, and 7D illustrate a logical switching control hierarchy providing integrated processing of a communication protocol stack according to another exemplary embodiment of the present invention.

In more detail, FIGS. 7A, 7B, 7C, and 7D show an integrated processing function of the communication protocol stack according to the present invention on an IEEE 802.16x based communication protocol stack and / or an IP based communication protocol stack compatible with the OSI 7 layer. A method of implementing a logical switching control layer for providing an embodiment of the present invention, specifically, FIG. 7A illustrates the communication to an upper layer (and / or a sublayer of a network layer) of a datalink layer on a communication protocol compatible with the OSI 7 layer. FIG. 7b illustrates an implementation method in which a logical switching control layer is provided to provide integrated processing of a protocol stack, and FIG. 7b illustrates a portion of an upper layer (and / or a transport layer) of a network layer on a communication protocol compatible with the OSI 7 layer. Layer) is provided with a logical switching control layer providing integrated processing of the communication protocol stack. 7c illustrates a logical switching control providing integrated processing of the communication protocol stack to an upper layer (and / or sublayer of a session layer) of a transport layer on a communication protocol compatible with the OSI 7 layer. FIG. 7D illustrates an integrated method of the communication protocol stack in an upper layer (and / or a sublayer of a presentation layer) of a session layer on a communication protocol compatible with the OSI 7 layer. A method of implementing a logical switching control layer is provided.

Those skilled in the art to which the present invention pertains, IEEE 802.16x based communication protocol stack compatible with the OSI 7 layer by referring to and / or modifying the drawings 7a, 7b, 7c and 7d and / or Or various implementation methods having a logical switching control layer providing an integrated processing function of the communication protocol stack according to the present invention on an IP-based communication protocol stack (eg, at least two or more layers are separated by functions). It can be inferred, but the present invention includes all the inferred implementation method, and is not limited to the implementation method shown in Figures 7a and 7b and 7c and 7d.

Also, those skilled in the art may refer to and / or modify the drawings 7a, 7b, 7c, and 7d to present the invention on another communication protocol stack that is incompatible with the OSI 7 layer. Although various implementation methods may be inferred with a logical switching control layer that provides an integrated processing function of a communication protocol stack according to the present invention, the present invention includes all of the inferred implementation methods. It is not limited to the implementation method shown in FIG. 7C and FIG. 7D.

In addition, those of ordinary skill in the art to which the present invention pertains refer to and / or modify the drawings 7a, 7b, 7c, and 7d to provide a communication protocol stack compatible with the OSI 7 layer and the OSI 7 layer. It would be possible to infer a variety of implementations having a logical switching control layer on the incompatible communications protocol stack that provides the integrated processing of the communications protocol stack according to the invention, but the present invention includes all such inferred implementation methods. The present invention is not limited to the method shown in FIGS. 7A, 7B, 7C, and 7D.

7A, 7B, 7C, and 7D, the OSI 7 hierarchical structure configures and maintains a physical link to enable data communication through a predetermined communication network, and a communication line corresponding to the physical link. A physical layer that defines the mechanical, electrical, functional, and procedural characteristics for establishing and / or maintaining and / or breaking circuit connections for direct transmission of data bits through Once the link is established, the physical layer is controlled to define functions for data delivery reliability such as addressing, network topology, circuit usage rules, error detection, frame forwarding and flow control for the physical link. A network between a datalink layer and at least two communication systems physically connected through the communication network Network Layer, which defines error control, flow control and multiplexing functions to provide path selection and connectivity, and virtual circuit construction, path maintenance, termination, and transmission for reliability of data transmission. And a transport layer that provides error detection, recovery, and flow control, wherein the physical layer, the data link layer, the network layer, and the transport layer provide reliability of data transmitted and received through a predetermined communication network. It is desirable to be defined for the primary purpose of the transmission.

In the OSI 7 hierarchical structure, the network layer further performs a function of correcting that an order of a packet is changed or an error occurs, and TCP and / or UDP are defined in the network layer.

According to an embodiment of the present invention, in the OSI 7 hierarchical structure, the physical layer and the data link layer include a hardware device configuration of a communication processing unit provided in the terminal 100 and / or correspond to the communication device configuration. It is preferable to include a firmware, so that the logical switching control layer that provides the integrated processing function of the communication protocol stack according to the present invention is preferably defined above the physical layer and the data link layer.

According to another embodiment of the present invention, a logical switching control layer providing integrated processing function of the communication protocol stack may be made in the form of firmware and defined in the data link layer and / or the physical layer, whereby the present invention It is not limited.

7A, 7B, 7C, and 7D, the OSI 7 hierarchical structure provides a function of configuring, managing, and terminating a communication session between applications provided in at least two communication systems connected through a predetermined communication network. A session layer defining a presentation layer, a presentation layer defining data conversion, compression, and encryption / decryption functions between applications provided in at least two communication systems connected through a predetermined communication network; And an application layer corresponding to an application program included in at least two communication systems connected through a communication network.

According to an embodiment of the present invention, the session layer and / or the presentation layer and / or the application layer may be integrated into one layer according to the functional characteristics of the terminal 100 providing the integrated processing function of the communication protocol stack. As such, the present invention is not limited thereto.

7A, 7B, 7C, and 7D, the terminal 100 includes a physical layer corresponding to the IEEE 802.11x standard to provide access and communication connection to the IEEE 802.16x based communication network. And a data link layer including a MAC layer corresponding to the IEEE 802.11x standard.

The physical layer corresponding to the IEEE 802.16x standard is a network component (eg, RAS (Radio) on an IEEE 802.16x based wireless communication network with the terminal 100 through a time division duplex / orthogonal frequency division multiple access (TDD / OFDMA) scheme. Access System, etc.) and a wireless communication section, wherein the wireless communication section includes at least one or more servers (and / or servers) through a wired communication section including a backbone network corresponding to the IEEE 802.16x based wireless communication network. It is characterized in that it is physically connected to the terminal (100).

The MAC layer included in the data link layer corresponding to the IEEE 802. 16x standard includes three convergence sublayers (CS), a MAC common part sublayer (CPS), and a privacy sublayer. Convergence layer for each service performs conversion or mapping function to MAC SDU so that data of external network received through CS SAP (Service Access Point) can be transmitted to MAC layer CPS through MAC SAP. In addition, these multiple CS specifications enable connection with various protocols.

Among the MAC layers, MAC CPS provides core MAC layer functions such as system access, bandwidth allocation, connection establishment, and connection management, and the privacy sublayer includes authentication, secure key exchange, and encryption. And so on.

In addition, it includes a 48-bit medium access control layer address defined in the MAC PDU (eg, 802-2001 (R)) on the data link layer, and connections allocated per terminal 100 when a base station (RAS) is connected are 16-bit CIDs. Structure identified by &quot;

Those skilled in the art to which the present invention pertains will be familiar with the technical features of the MAC layer included in the physical layer and the data link layer with reference to the IEEE 802.16x communication protocol specification. Detailed description of the physical layer and data link layer corresponding to the 802.16x communication protocol standard will be omitted for convenience.

7A, 7B, 7C, and 7D, the terminal 100 connects the TCP / IP to the TCP / IP (and / or UDP / IP) based communication network and provides a communication connection. An Ethernet physical layer including (and / or UDP / IP) and a datalink layer including an Ethernet MAC layer including the TCP / IP (and / or UDP / IP). It is characterized by.

The physical layer corresponding to the TCP / IP (and / or UDP / IP) standard includes a network interface card (NIC) and / or a high speed internet device (eg, a cable communication modem, and / or an ADSL) provided in the terminal 100. Hub connected to a network component (e.g., the NIC through a UTP cable) via a symmetric digital subscriber line (Asymmetric Digital Subscriber Line) communication modem and / or a Very High-data Rate Digital Subscriber Line (VDSL) communication modem, etc. And / or a router (Router), an Internet Service Provider (ISP) device connected to the broadband Internet device through a predetermined BNC cable), and a wired communication section, wherein the wired communication section is the backbone. It is characterized in that it is physically connected to at least one server (and / or terminal 100) through a wired communication interval including a network.

The MAC layer included in the data link layer corresponding to the TCP / IP (and / or UDP / IP) standard performs a medium access control function defined in the IEEE 802.3 standard, and at least corresponds to the physical layer. It consists of one or more sublayers.

Those skilled in the art to which the present invention pertains can refer to the TCP / IP (and / or UDP / IP) communication protocol specification to provide technical features of the MAC layer included in the physical layer and the data link layer. As will be understood, detailed descriptions of the physical layer and the data link layer corresponding to the TCP / IP (and / or UDP / IP) communication protocol specification will be omitted for convenience.

Referring to FIG. 7A, the logical switching control layer may be provided at an upper layer (and / or a sublayer included in a network layer) of the datalink layer. Or an application layer and / or presentation layer and / or session layer and / or transport layer, etc., on the communication protocol stack to the IEEE 802.16x based datalink layer and / or physical layer, or TCP / Switching to an IP (and / or UDP / IP) based datalink layer and / or a physical layer.

In addition, the logical switching control layer provided in an upper layer (and / or sub-layer included in the network layer) of the data link layer may be provided through a presentation layer, a session layer, and a transport layer at an application layer on the communication protocol stack. Switching a communication packet provided to the network layer to the IEEE 802.16x based data link layer and / or a physical layer, or to a TCP / IP (and / or UDP / IP) based data link layer and / or a physical layer. Thus, the communication packet provided from the application layer to the network layer through the presentation layer, the session layer, and the transport layer is transmitted to the IEEE 802.16x based wireless communication network, or TCP / IP (and And / or is transmitted through any one of UDP / IP) based wired communication networks.

In addition, the logical switching control layer provided in an upper layer (and / or a sub-layer included in a network layer) of the data link layer may include the terminal 100 corresponding to a communication network to which the terminal 100 is currently connected. Communication packets received from the IEEE 802.16x based physical layer corresponding to the currently connected communication network and provided to the IEEE 802.11x based data link layer, and / or TCP / IP corresponding to the communication network to which the terminal 100 is currently connected. Switching the communication packet received from the (and / or UDP / IP) based physical layer and provided to the TCP / IP (and / or UDP / IP) based data link layer through the network layer to a higher layer, As a result, the communication packet received from the communication network to which the terminal 100 is currently connected is transferred to the transport layer through a network layer including the logical switching control layer. It is received by the application layer via a session layer and a presentation layer.

In FIG. 7A, the logical switching control layer is illustrated as a sub-layer provided above the network layer for convenience, but the logical switching control layer is a sub-layer existing between the network layer and the data link layer, and / or the It may be a sublayer provided below the network layer, whereby the present invention is not limited.

Referring to FIG. 7B, the logical switching control layer is provided in an upper layer (and / or a sublayer included in a transport layer) of the network layer, and is in an upper layer (and / or transport layer) of the network layer. Switch an application layer and / or a presentation layer and / or a session layer on the communication protocol stack to a network layer provided above the IEEE 802.16x based physical layer and / or datalink layer through the transport layer. It is characterized by switching to a network layer provided on a TCP / IP (and / or UDP / IP) based physical layer and / or a data link layer.

In addition, the logical switching control layer provided in an upper layer (and / or sub-layer included in the transport layer) of the network layer, the transport layer through the presentation layer and the session layer in the application layer on the communication protocol stack Switch the communication packet provided to the network layer provided above the IEEE 802.16x based physical layer and / or data link layer, or the TCP / IP (and / or UDP / IP) based physical layer and / or data link layer. And switching to a network layer provided at a higher level, whereby the communication packet provided from the application layer to the transport layer through the presentation layer and the session layer is currently accessed by the terminal 100 via the network layer. Either an IEEE 802.16x based wireless network or a TCP / IP (and / or UDP / IP) based wired network It is transmitted over a communication network.

In addition, the logical switching control layer provided in an upper layer (and / or sub-layer included in the transport layer) of the network layer is from an IEEE 802.16x based physical layer corresponding to a communication network to which the terminal 100 is currently connected. Communication packets received and provided to the network layer through the IEEE 802. 16x based data link layer, and / or TCP / IP (and / or UDP / IP) based physical corresponding to the communication network to which the terminal 100 is currently connected. And a communication packet received from the layer and provided to the network layer through the TCP / IP (and / or UDP / IP) based data link layer, to the upper layer through the transport layer. A communication packet received from a communication network to which 100 currently belongs is presented to the session layer through a transport layer including the logical switching control layer. Orientation through the layer is received by the application layer.

In FIG. 7B, the logical switching control layer is illustrated as a sub-layer provided above the transport layer for convenience. However, the logical switching control layer is a sub-layer existing between the transport layer and the network layer, and / or the transmission. It may be a sublayer provided below the hierarchy, and the present invention is not limited thereby.

Referring to FIG. 7C, the logical switching control layer is provided in an upper layer (and / or a sublayer included in a session layer) of the transport layer, and is in a higher layer (and / or session layer) of the transport layer. Switch an application layer and / or a presentation layer on the communication protocol stack to a transport layer above a network layer provided above the IEEE 802.16x based physical layer and / or datalink layer through the session layer, And switching to a transport layer above a network layer provided on a TCP / IP (and / or UDP / IP) based physical layer and / or a data link layer.

In addition, the logical switching control layer provided in the upper layer (and / or sub-layer included in the session layer) of the transport layer, the communication provided to the session layer through the presentation layer in the application layer on the communication protocol stack Switching a packet to a transport layer above the network layer provided on the IEEE 802.16x based physical layer and / or a datalink layer, or a TCP / IP (and / or UDP / IP) based physical layer and / or datalink And switching to a transport layer above the network layer provided above the layer, whereby the communication packet provided from the application layer to the session layer through the presentation layer is transmitted through the transport layer and the network layer. IEEE 802.16x based wireless network currently connected by 100), or TCP / IP (and / or UDP / IP) based wired It is transmitted through any one of a trust network.

In addition, the logical switching control layer provided in an upper layer (and / or sub-layer included in the session layer) of the transport layer is from an IEEE 802.16x based physical layer corresponding to a communication network to which the terminal 100 is currently connected. A communication packet received and provided to the transport layer via the IEEE 802. 16x-based data link layer, and / or TCP / IP (and / or UDP) corresponding to the communication network to which the terminal 100 is currently connected; / IP) switching communication packets received from the physical layer and provided to the transport layer via the TCP / IP (and / or UDP / IP) based datalink layer to the transport layer through the session layer to a higher layer. In this way, the communication packet received from the communication network to which the terminal 100 is currently connected is the three including the logical switching control layer. It is received by the application layer via the presentation layer to the application layer via the presentation layer.

In FIG. 7C, the logical switching control layer is illustrated as a sub-layer provided above the session layer for convenience, but the logical switching control layer is a sub-layer existing between the session layer and the transport layer, and / or the session. It may be a sublayer provided below the hierarchy, and the present invention is not limited thereby.

Referring to FIG. 7D, the logical switching control layer is provided in an upper layer (and / or a sub-layer included in the presentation layer) of the session layer, and is in an upper layer (and / or presentation) of the session layer. Switching the application layer on the communication protocol stack to a session layer above a transport layer above a network layer provided above the IEEE 802.16x based physical layer and / or a datalink layer through the presentation layer; And switching to a session layer above a transport layer above a network layer provided on a TCP / IP (and / or UDP / IP) based physical layer and / or a data link layer.

The logical switching control layer provided in an upper layer (and / or a sublayer included in a presentation layer) of the session layer may include a communication packet provided from the application layer on the communication protocol stack to the presentation layer. Switching to a session layer above a transport layer above the network layer provided on an IEEE 802.16x based physical layer and / or a datalink layer, or a TCP / IP (and / or UDP / IP) based physical layer and / or a datalink And switching to a session layer above a transport layer located above the network layer, whereby a communication packet provided from the application layer to the presentation layer passes through the session layer, the transport layer, and the network layer. IEEE 802.16x based wireless communication network, or TCP / IP (and / It is transmitted through one of the UDP / IP) based wired communication network a communication network.

In addition, the logical switching control layer provided in an upper layer (and / or a sub-layer included in the presentation layer) of the session layer is an IEEE 802.16x based physical layer corresponding to a communication network to which the terminal 100 is currently connected. A communication packet received from and provided to the transport layer and the session layer via the IEEE 802. 16x based data link layer, and / or the TCP / IP corresponding to the communication network to which the terminal 100 is currently connected. And / or a communication packet received from the UDP / IP based physical layer and provided to the transport layer and the session layer via the network layer via the TCP / IP (and / or UDP / IP) based data link layer. And switching to a higher layer through the presentation layer, whereby the communication packet received from the communication network to which the terminal 100 is currently connected. Through the presentation file that contains the logical switching the control layer is received by the application layer.

In FIG. 7D, the logical switching control layer is illustrated as a sub-layer provided above the presentation layer for convenience. However, the logical switching control layer is a sub-layer existing between the presentation layer and the session layer. The sublayer provided below the presentation layer may be used, and the present invention is not limited thereto.

8 is a diagram illustrating a configuration of an IEEE 802.11x based WLAN system according to an embodiment of the present invention.

Referring to FIG. 8, the WLAN system includes at least one terminal 100 (eg, an AT) and a base station (eg, an AP) having a function of processing a communication protocol stack defined in the WLAN. Access Point)), APM (Access Point Manager) for managing at least one base station and the operator network, characterized in that the operator network is HA (Home) for mobility of the IP to the terminal 100 Agent), AAA (Authentication, Authorization and Accounting) server for authentication and billing of the user, and a management server (Network Management System) and the FA (Foreign Agent) in conjunction with the external wireless network is further included.

Referring to FIG. 8 according to a preferred embodiment of the present invention, the WLAN system further includes a Dynamic Host Configuration Protocol (DHCP) server and DNS for allocating and registering a MIP to the terminal 100 accessing the WLAN. In addition, it may be possible to add at least one or more components according to the intention of the operator and / or the type of additional service.

Those skilled in the art to which the present invention pertains, since they will be familiar with the detailed technical specifications for the WLAN system, a detailed description thereof will be omitted for convenience.

9 is a diagram showing the configuration of an IEEE 802.16x based portable Internet system according to an embodiment of the present invention.

More specifically, FIG. 9 is a 2.3 GHz portable Internet network based on High-speed Portable Internet (HPi), which provides a wireless access technology including mobility of 60 km / h or more and a transmission speed of 1 Mbps.

The 2.3 GHz portable Internet system uses an Orthogonal Frequency Division Multiple Access (OFDMA) / TDD (Time Division Duplex) wideband wireless transmission technology to form a cellular network and up / down an IP-based wireless data service. It can effectively adapt to asymmetric transmission characteristics, support handoff to guarantee inter-cell mobility without interruption of service, dynamically or statically assign IP to portable terminal 100, and also allow unauthorized users access to the system. It performs an authentication function that effectively prevents and guarantees quality of service against latency and packet loss for high speed transmission of various types of IP-based packet data such as streaming video, FTP, mail, chat, etc. provided by the wired Internet. It is made to include the features.

Referring to FIG. 9, the portable Internet system includes at least one terminal 100 (eg, an access terminal (AT) or a portable subscriber station (PSS)) equipped with a function of processing a communication protocol stack defined in the portable internet. And a provider network that connects a base station (eg, an access point (AP) or a radio access station (RAS)), a packet access router (PAR), and at least one or more PARs. The operator network includes a home agent (HA) for mobility of IP to the terminal 100, an authentication, authorization and accounting (AAA) server for authentication and billing of a user, a management server (Network Management System) and an external radio. It further comprises a foreign agent (FA) that interworks with the network.

Referring to FIG. 9 according to a preferred embodiment of the present invention, the portable Internet system further includes a Dynamic Host Configuration Protocol (DHCP) server and DNS for allocating and registering a MIP to the terminal 100 accessing the portable Internet. In addition, it may be possible to add at least one or more components according to the intention of the operator and / or the type of additional service.

The terminal 100 is an endpoint of a wireless channel in the portable Internet system, and communicates with the base station in an OFDMA manner, and transmits and receives a wireless channel, a MAC processing function, a handover function, a user authentication and encryption function, and a radio link control management function. And so on.

The base station performs a wired / wireless channel conversion function to transfer information (or data) received from the terminal 100 to the PAR or, conversely, converts various information (or data) received from the PAR into an OFDMA-based radio signal. Packet retransmission function for error-free packet transmission and reception, packet scheduling and radio bandwidth allocation function, ranging function, ranging function, packet call connection setting, It performs connection control, handover control and PAR access functions related to maintenance and release.

The PAR is connected to and manages a plurality of base stations, and performs a handover control function to ensure high-speed mobility in the PAR. To this end, the base station and the PAR are connected based on the IP protocol, and is preferably configured based on a gigabit Ethernet switch for high-speed packet transmission.

In addition, the portable Internet system provides a Uh interface between the terminal 100 and the base station, an Ah interface between the base station and the PAR, a Ph interface between the PAR and the PAR, and between the AAA and the HA of the operator network to provide high-speed wireless communication. Ih interface is provided.

The Uh interface provided between the terminal 100 and the base station follows the HPi physical layer (PHYsical; PHY) and media access control (MAC) standards, and the physical layer and MAC standards are line of sight (LOS). It is based on the 2.3GHz band with a non-guaranteed multipath channel environment, and provides mobility based on the wireless access standard of the IEEE 802.16 series.

According to an embodiment of the present invention, the physical layer standard of the Uh interface includes all items corresponding to OFDMA in the IEEE802.16 standard, and the changed parts of the IEEE 802.16 standard are OFDMA subcarriers for frame structure, uplink and downlink. Allocation method and channel encoding method. Additional additions include Transmit / Receive Transition Gap (TGT), Receive / Transmit Transition Gap (RTG), and RF parameters to accommodate a maximum radius of 1km. In addition, the MAC standard is optimized for the OFDMA PHY. The ranging and bandwidth request procedures are modified to fit the OFDMA PHY, and a handover function for mobility support is added. In addition, a sleep mode function for reducing power consumption of the terminal 100 and a mechanism for checking a communication interruption state and recovering resources allocated at the time of interruption have been added.

The Ah interface between the base station and the PAR is used in the ANAP (Access Network Application Part) protocol that defines the control messages for smooth communication between the base station and the PAR, the Ph interface between the PAR and the PAR is used for smooth communication between the PAR The PAR-PAR Application Part (PPAP) protocol, which specifies control messages, is used.

The standard for the Ih interface between the PAR and the AAA is based on the IETF Diameter Base protocol, and also refers to the IETF Diameter MIP Application and the IETF Diameter Extensible Authentication Protocol (EAP). In addition, the standard for the Ih interface between the PAR and the HA is based on MIP (Mobile IP) of IETF RFC 3344, and MIP NAI (Network Access Identification) extension, MIP Challenge / Response extension, AAA Registration Key Extension, MIP extension for AAA NAI and MIP extension for reverse tunneling are added and used.

10A, 10B, and 10C illustrate a protocol stack structure in which a terminal 100 equipped with a switching function of a communication protocol stack according to an embodiment of the present invention communicates with a server (and / or terminal 100) on a communication network. One drawing.

In more detail, FIGS. 10A, 10B, and 10C illustrate a predetermined wired communication network and / or a terminal 100 having a switching function of a communication protocol stack through a logical switching layer illustrated in FIGS. 6A and / or 7A. An embodiment of a protocol stack structure for communicating with a server (and / or terminal 100) on a network via a wireless communication network, specifically, Figure 10a is a wireless communication network based on the current IEEE 802.11x terminal 10 When connected to the protocol stack structure in which the terminal 100 communicates with a server (and / or terminal 100) on a backbone network through the IEEE 802.11x-based wireless communication network through the switching function of the communication protocol stack 10b shows that when the terminal 100 is currently connected to an IEEE 802.16x based wireless communication network, the terminal 100 switches the communication protocol stack. A protocol stack structure for communicating with a server (and / or terminal 100) on a backbone network through the IEEE 802.16x based wireless communication network through a function, and FIG. 10C shows that the terminal 100 is currently configured with TCP / IP ( And / or when connected to a wired communication network based on UDP / IP, the terminal 100 via the TCP / IP (and / or UDP / IP) based wired communication network through a switching function of the communication protocol stack. The protocol stack structure for communicating with a server (and / or terminal 100) on the backbone network.

According to the present invention, the terminal 100 in Figure 10a, Figure 10b and Figure 10c is an IEEE 802.11x-based wireless communication network, or IEEE 802.16x-based wireless communication network, or TCP / IP (and / or UDP / IP) The server (and / or terminal 100) on the backbone network to communicate through the wired network based on the same server, the terminal 100 is the terminal 100 through the switching function of the communication protocol stack according to the present invention To the currently connected (and / or telecommunications) network (e.g., IEEE 802.11x based wireless network, or IEEE 802.16x based wireless network, or TCP / IP (and / or UDP / IP) based wired network) It may communicate with the server (and / or terminal 100) regardless.

Those skilled in the art (for example, those who understand the protocol stack structure), with reference to the embodiments shown in Figures 10a, 10b, and 10c, the drawings 6a and / or The terminal 100 equipped with the switching function of the communication protocol stack corresponding to the logical switching layer illustrated in 7a is connected to the IEEE 802.11x based wireless communication network, or the IEEE 802.16x based wireless communication network, or TCP / IP (and / or). Since the protocol stack structure for communicating with the server (and / or terminal 100) through any one of the UDP / IP-based wired communication network will be understood, a detailed description thereof will be omitted for convenience.

In addition, those skilled in the art (for example, those who understand the protocol stack structure), with reference to the embodiments shown in Figures 10a, 10b and 10c, Figures 6b and And / or the terminal 100 equipped with the switching function of the communication protocol stack corresponding to the logical switching layer shown in FIG. 7b, and / or the communication protocol stack corresponding to the logical switching layer shown in FIGS. 6c and / or 7c. The terminal 100 having a switching function of and / or the terminal 100 having a switching function of a communication protocol stack corresponding to the logical switching layer shown in FIGS. 6D and / or 7D is based on the IEEE 802.11x. Communicating with the server (and / or terminal 100) via any one of a wireless communication network, an IEEE 802.16x based wireless communication network, or a TCP / IP (and / or UDP / IP) based wired communication network. F Since the protocol stack structure will be understood, a detailed description thereof will be omitted.

11 is a diagram illustrating a method for encrypting and transmitting data by a symmetric key (or secret key) method in a terminal 100 equipped with a switching function of a communication protocol stack according to an exemplary embodiment of the present invention.

In more detail, FIG. 11 illustrates a symmetric key (or symmetric key) of the data based on a predetermined certificate (not shown) in the terminal 100 having the encryption function as shown in FIGS. 2 and / or 3 and / or 4. The present invention relates to a method of encrypting and transmitting in a secret key) manner, and if the present invention belongs to a general knowledge, refer to and / or modify the drawing 11 to symmetric the data in the terminal 100. Various implementation methods for encrypting using a key (or secret key) method may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 11 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate (not shown) provided in the terminal 100, the public certificate (not shown) It may be stored in a predetermined memory provided in the terminal 100, and / or stored in an IC chip mounted in the terminal 100, thereby the present invention is not limited.

According to another embodiment of the present invention, the symmetric key (or secret key) may be stored in the memory and / or IC chip of the terminal 100 in addition to the public certificate (not shown), thereby limiting the anti-invention Not.

Referring to FIG. 11, when predetermined data is extracted from the information extraction unit of the terminal 100 and / or predetermined data is generated in the information generating unit, the predetermined information is provided to the encryption processing unit 160 (1100). When the data is provided, the encryption processing unit 160 reads a predetermined symmetric key (or secret key) for encrypting data from the public certificate (not shown) provided in the terminal 100 (1105). The data is encrypted through the read symmetric key (or secret key) (1110).

Here, the encryption function of the encryption processing unit 160 is called E (Encryption), the symmetric key (or secret key) is k (key), the data is P (Plaintext), and the symmetric key (or secret key). If the encrypted data is referred to as C (Ciphertext), the encryption function of the encryption processing unit 160 may be expressed by a formula such as "Ek (P) = C".

According to the embodiment of the present invention, the encryption processing unit 160 encrypts the data through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( It is preferable to include at least one or more of the International Data Encryption Algorithm, and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When the data is encrypted through the symmetric key (or the secret key) as described above, the encrypted data is included in a predetermined communication packet in the uppermost layer on the communication protocol stack provided in the terminal 100 to the lower layer of the next step. And when the communication packet reaches the logical switching control layer, the logical switching control layer corresponds to a wired communication network (or wireless communication network) to which the terminal 100 is currently connected. By providing a switch to a lower protocol layer, the communication packet is transmitted to a server (and / or terminal 100) on a wired network (or wireless network) to which the terminal 100 is connected.

FIG. 12 is a diagram illustrating a method of decrypting data received after being encrypted at a server (and / or terminal 100) by a symmetric key (or secret key) method according to an embodiment of the present invention.

In more detail, FIG. 12 shows the server (and / or terminal 100) the data received after being encrypted from the terminal 100 having the encryption function as shown in FIGS. 2 and / or 3 and / or 4. In the embodiment of the present invention for decrypting by a symmetric key (or secret key) method, if the present invention belongs to a general knowledge, referring to and / or modified with reference to Figure 12 in the terminal 100 Various implementation methods for decrypting encrypted data using a symmetric key (or secret key) method may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG. .

In this figure 12 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate (not shown) provided in the server (and / or terminal 100), the public The certificate (not shown) is preferably stored in a predetermined database (not shown) that cooperates with the server (and / or terminal 100), whereby the present invention is not limited.

Referring to FIG. 12, the server (and / or terminal 100) receives at least one or more packets including the encrypted data (1200) and is provided at the server (and / or terminal 100). Extract a predetermined symmetric key (or secret key) for decrypting the encrypted data from the authorized certificate (not shown) (1205), and decrypt the encrypted data through the extracted symmetric key (or secret key) 1210.

Herein, the decryption function of the server (and / or the terminal 100) is called D (Decryption), and the symmetric key (or secret key) is encrypted with k (key) and the symmetric key (or secret key). When C (Ciphertext) and the decrypted data are P (Plaintext), the function of the server (and / or terminal 100) to decrypt the encrypted data is "Dk = P, or Dk (Ek ( It can be expressed by an expression such as P)) = P ".

According to an embodiment of the present invention, an algorithm for decrypting the encrypted data by the server (and / or terminal 100) through the symmetric key (or secret key) may include SEED, DES (Data Encryption Standard), Triple It is preferable to include at least one or more of -DES, Skipjack, International Data Encryption Algorithm (IDEA), and various other decryption algorithms may be used, the decryption algorithm is the encryption used in the terminal 100 Characterized by matching the algorithm, the present invention is not limited by a specific decoding algorithm.

FIG. 13 is a diagram illustrating a method for encrypting and transmitting data in a public key infrastructure structure in a terminal 100 equipped with a switching function of a communication protocol stack according to an exemplary embodiment of the present invention.

More specifically, FIG. 13 shows the public key infrastructure based on a predetermined public certificate (not shown) in the terminal 100 equipped with the encryption function as shown in FIGS. 2 and / or 3 and / or 4. The present invention relates to a method of encrypting and transmitting the data, and if the present invention is of ordinary skill in the art to which the present invention pertains, referring to and / or modifying the drawing of FIG. Various implementation methods of encryption may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 13 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate (not shown) provided in the terminal 100, the public certificate (not shown) is the terminal ( 100 may be stored in a predetermined memory and / or stored in an IC chip mounted in the terminal 100, and the present invention is not limited thereto.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) that is operated and managed by a certification authority that issues the public certificate (not shown) to the terminal 100. It is not limited.

Referring to FIG. 13, when predetermined data is extracted from the information extracting unit of the terminal 100 and / or predetermined data is generated in the information generating unit, the predetermined information is provided to the encryption processing unit 160 (1300). When the data is provided, the encryption processing unit 160 extracts a predetermined server side public key for encrypting the data from the public certificate (not shown) (1305), and through the extracted server side public key. The data is encrypted (1310).

Here, the encryption function of the encryption processing unit 160 is called E (Encryption), the server-side public key is k1 (key), the data is P (Plaintext), and the data encrypted with the server-side public key is C ( Ciphertext), the encryption function of the encryption processing unit 160 can be expressed by a formula such as "Ek1 (P) = C".

According to an embodiment of the present invention, the encryption processing unit 160 encrypts the data through the server-side public key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH. (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, including at least one or more is preferably made, in addition to a variety of encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the data through the RSA encryption algorithm among the encryption algorithms, the published method (Modulus) used in the encryption process is n, the prime numbers that are not disclosed as different prime factors of n are a and b, If the published exponent (e.g., 3 or 216+) is e and the undisclosed exponent is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1) (b-1) ", wherein the encryption function of the encryption processing unit 160 may be expressed as" C = Ek1 (P) = Pe mod n ".

When the data is encrypted through the server-side public key as described above, the encrypted data is included in a predetermined communication packet at the highest layer on the communication protocol stack provided in the terminal 100 and provided to a lower layer of the next step. When the communication packet reaches the logical switching control layer, the logical switching control layer transmits a communication packet including the encrypted data to a lower protocol layer corresponding to the wired communication network (or wireless communication network) to which the terminal 100 is currently connected. By switching to provide the communication packet to the server (and / or terminal 100) on the wired network (or wireless network) to which the terminal 100 is connected.

14 is a diagram illustrating a method for decrypting data received by being encrypted by a server (and / or terminal 100) in a public key infrastructure structure according to an embodiment of the present invention.

In more detail, FIG. 14 shows the server (and / or terminal 100) the data received after being encrypted from the terminal 100 having the encryption function as shown in FIGS. 2 and / or 3 and / or 4. The present invention relates to a method for decrypting by using a public key based structure, and if the present invention belongs to the general knowledge, the server-side disclosure in the terminal 100 by referring to and / or modifying this drawing 14. Although various implementation methods for decrypting a key encrypted data in a public key infrastructure scheme may be inferred, the present invention includes all the inferred implementation methods and is not limited to the implementation method illustrated in FIG.

According to the embodiment of the present invention, in FIG. 14, the server-side private key for decrypting the data encrypted with the server-side public key in a public key infrastructure structure is provided in the server (and / or the terminal 100). It is preferable to read from a certificate (not shown), and the public certificate (not shown) is preferably stored in a predetermined database (not shown) in association with the server (and / or the terminal 100). The present invention is not limited.

Referring to FIG. 14, the server (and / or terminal 100) receives at least one or more packets including the encrypted data (1400), and the server (and / or terminal 100) is provided. The server-side private key for decrypting the encrypted data is extracted from the public certificate (not shown) (1405), and the encrypted data is decrypted through the extracted server-side private key (1410).

Here, the decryption function of the server (and / or terminal 100) is called D (Decryption), the server-side private key is k2 (key), the data encrypted with the server-side public key is C (Ciphertext), and When the data decrypted with the server-side private key is called P (Plaintext), the function of decrypting the encrypted data by the server (and / or the terminal 100) is "Dk2 = P, or Dk2 (Ek (P)). It can be expressed as an expression such as = P ".

According to an embodiment of the present invention, an algorithm in which the server (and / or terminal 100) decrypts data encrypted by the server-side public key in the terminal 100 through the server-side private key may be RSA (Ron Rivest). , Adi Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. A decryption algorithm may be used, but the decryption algorithm is matched with an encryption algorithm used in the terminal 100, and the present invention is not limited by a specific decryption algorithm.

For example, when decrypting the data through the RSA decryption algorithm of the public key based decryption algorithm, n is a public method (Modulus) used in the decryption process, n is a prime number that is not disclosed with different prime factors of n a. And b, e is the published index (e.g. 3 or 216+) and e is the undisclosed index d, where n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decryption function of the server (and / or the terminal 100) may be expressed as" P = Dk2 = Cd mod n ".

15 is a diagram illustrating a method of encrypting and transmitting data in an electronic envelope method in a terminal 100 equipped with a switching function of a communication protocol stack according to an exemplary embodiment of the present invention.

More specifically, FIG. 15 shows the data in an electronic envelope based on a predetermined certificate (not shown) in the terminal 100 equipped with the encryption function as shown in FIGS. 2 and / or 3 and / or 4. The present invention relates to a method of encrypting and transmitting the data, and if the present invention belongs to a general knowledge, the present invention encrypts the data in an electronic envelope method by referring to and / or modifying the drawing 15. Various implementation methods may be inferred, but the present invention includes all of the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 15 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate (not shown) provided in the terminal 100, the public certificate (not shown) is the terminal ( 100 may be stored in a predetermined memory and / or stored in an IC chip mounted in the terminal 100, and the present invention is not limited thereto.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) that is operated and managed by a certification authority that issues the public certificate (not shown) to the terminal 100. It is not limited.

Referring to FIG. 15, when predetermined data is extracted from the information extracting unit of the terminal 100 and / or predetermined data is generated in the information generating unit, the predetermined information is provided to the encryption processing unit 160 (1500). When the data is provided, the encryption processing unit 160 generates a random secret key for encrypting the data using a secret key (symmetric key) method (1505) and generates the data. The data is encrypted using the secret key (1510).

Here, the encryption function of the encryption processing unit 160 is called E (Encryption), the secret key is r (random secret key), the data P (Plaintext), and the data encrypted with the secret key C (Ciphertext) In this case, the encryption function of the encryption processing unit 160 may be expressed by a formula such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit 160 encrypts the data through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data Encryption Algorithm) It is preferable to include at least one of the above, and in addition to the encryption algorithm of various forms may be used, but the present invention is not limited by a specific encryption algorithm.

Thereafter, the encryption processing unit 160 encrypts the secret key (random secret key) used to encrypt the data. To this end, the encryption processing unit 160 uses a predetermined server-side public key from the public certificate (not shown). Extract (1515) and encrypt the private key using the server-side public key (1520).

Here, the encryption function of the encryption processing unit 160 is called E (Encryption), the server-side public key is k1 (key), the secret key is r (random Secret key), and the secret encrypted with the server-side public key. If the key is C (Ciphertext), the encryption function of the encryption processing unit 160 may be expressed by an expression such as "Ek1 (r) = C".

According to the exemplary embodiment of the present invention, the encryption processing unit 160 encrypts the secret key through the server-side public key: RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the undisclosed prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 160 may be expressed as" C = Ek1 (r) = re mod n ".

If the data is encrypted with the secret key and the secret key is encrypted with the server-side public key, the encrypted data is included in a predetermined communication packet at the highest layer on the communication protocol stack provided in the terminal 100. When the communication packet reaches the logical switching control layer, the logical switching control layer transmits a communication packet including the encrypted data to the wired communication network to which the terminal 100 is currently connected. Or by providing a switch to a lower protocol layer corresponding to a wireless communication network, thereby transmitting the communication packet to a server (and / or terminal 100) on a wired network (or wireless network) to which the terminal 100 is connected.

FIG. 16 is a diagram illustrating a method for decrypting data received by being encrypted by a server (and / or terminal 100) by an electronic envelope method according to an exemplary embodiment of the present invention.

In more detail, FIG. 16 illustrates a server (and / or terminal) that receives transaction data including encrypted data from a terminal 100 having encryption functions as shown in FIGS. 2 and / or 3 and / or 4. (100)) to the method for decrypting the transaction data in an electronic envelope method, if there is a general knowledge in the technical field to which the present invention belongs, with reference to and / or modified this figure 16 the terminal 100 In various embodiments, it may be possible to infer various implementation methods for decrypting the transaction data encrypted by the electronic envelope method in the same electronic envelope method, but the present invention includes all of the inferred implementation methods, and is shown in FIG. It is not limited to this.

In FIG. 16 according to the embodiment of the present invention, the server-side private key for decrypting the transaction data in an electronic envelope method is read from the public certificate (not shown) provided in the server (and / or terminal 100). Preferably, the public certificate (not shown) is preferably stored in a predetermined database (not shown) interworking with the server (and / or the terminal 100), whereby the present invention is not limited.

Referring to FIG. 16, the server (and / or terminal 100) receives at least one or more packets including the encrypted data (600), the server (and / or terminal 100) Extracting a server-side private key for decrypting the encrypted secret key included in the transaction data from a public certificate (not shown) (1605), and the server-side at the terminal 100 through the extracted server-side private key By decrypting the secret key encrypted with the public key (1610), extracting a predetermined secret key for decrypting the data (1615), and decrypting the data using the extracted secret key (1620), the terminal ( In step 10025, the data encrypted with the secret key is extracted.

Here, the decryption function of the server (and / or terminal 100) is called D (Decryption), the server-side private key is k2 (key), and the secret key encrypted with the server-side public key is C (Ciphertext), And a secret key decrypted with the server-side private key is r (random secret key), the function of the server (and / or terminal 100) decrypting the encrypted secret key is "Dk2 = r, or Dk2 ( Ek1 (r)) = r ".

According to an embodiment of the present invention, an algorithm for the server (and / or terminal 100) to decrypt the secret key encrypted with the server-side public key in the terminal 100 through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although a decryption algorithm may be used, the decryption algorithm is matched with an encryption algorithm used in the terminal 100, and the present invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decryption function of the server (and / or terminal 100) may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the server (and / or terminal 100) is called D (Decryption), the secret key is r (random secret key), the data encrypted with the secret key (C (Ciphertext), and When the decrypted data is called P (Plaintext), the function of decrypting the encrypted data by the server (and / or the terminal 100) is “Dr = P, or Dr (Er (P)) = P”. The same formula can be used.

According to an embodiment of the present invention, the algorithm for the server (and / or terminal 100) to decrypt the encrypted data through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, It is preferable to include at least one or more of the International Data Encryption Algorithm (IDEA), and various forms of decryption algorithms may be used, but the decryption algorithm is matched with the encryption algorithm used in the terminal 100. The present invention is not limited to the specific decoding algorithm.

FIG. 17 illustrates a method for encrypting and transmitting data in a key exchange method in a terminal 100 having a switching function of a communication protocol stack according to an exemplary embodiment of the present invention.

In more detail, FIG. 17 illustrates a method of key exchange of the data based on a predetermined certificate (not shown) in the terminal 100 having the encryption function as shown in FIGS. 2 and / or 3 and / or 4. As an embodiment of the present invention, a method of encrypting and transmitting the data, and the present invention includes various methods of encrypting the data in a key exchange method in the terminal 100 by referring to and / or modifying the drawing 17. Although the implementation method may be inferred, the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In the figure 17 according to the embodiment of the present invention, the device-side private key and the server-side public key are preferably read from the public certificate (not shown) provided in the terminal 100, and the public certificate (not shown). ) May be stored in a predetermined memory provided in the terminal 100, and / or stored in an IC chip mounted in the terminal 100, and the present invention is not limited thereto.

Alternatively, the device-side private key and the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate (not shown) to the terminal 100. Thereby, this invention is not limited.

Referring to FIG. 17, when predetermined data is extracted from the information extracting unit of the terminal 100 and / or predetermined data is generated in the information generating unit, the predetermined information is provided to the encryption processing unit 160 (1700). When the data is provided, the encryption processing unit 160 may transmit the data to a predetermined one-way hash function (eg, a hash code of a predetermined length regardless of the length of the data). ) And a one-way hash function that is unable to identify (or infer) the original message via the hash code (or message digest.) The terminal 100 and the server (and / or terminal 100). E) uses the same hash function to generate a predetermined message digest (1705) and digitally sign the message digest by encrypting the message digest with the device-side private key (1710).

Herein, the encryption function of the encryption processing unit 160 is referred to as E (Encryption), the device side private key is t1 (18erminal side key), the message digest is m (message digest), and the device side private key is encrypted. If the message digest is C (Ciphertext), the digital signature function of the encryption processing unit 160 may be expressed by an expression such as "Et1 (m) = C".

According to an embodiment of the present invention, the encryption processing unit 160 encrypts the message digest through the device-side private key, including RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the message digest through the RSA encryption algorithm, among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a decimal number that is not disclosed by the different prime factors of n is a. b, if the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a- 1) (b-1) ", wherein the digital signature function of the encryption processing unit 160 may be expressed as" C = Et1 (m) = me mod n ".

In addition, the encryption processing unit 160 generates a predetermined random secret key for encrypting the data in a secret key (symmetric key) scheme (1715), and the data and the device-side individual. The message digest encrypted with a key and a copy of a certificate (eg, a certificate including a device-side public key) included in the public certificate (not shown) are linked to each other and encrypted using the generated secret key (1720).

Here, the encryption function of the encryption processing unit 160 is called E (Encryption), the secret key is r (random secret key), the data and certificate copy P (Plaintext), and the data and certificate encrypted with the secret key When the copy is referred to as C (Ciphertext), the encryption function of the encryption processing unit 160 may be expressed by an expression such as "Er (P) = C".

According to the method of the present invention, the encryption processing unit 160 encrypts the data and the certificate copy through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data) It is preferable to include at least one or more of the Encryption Algorithm, and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

In addition, the encryption processing unit 160 extracts a predetermined server-side public key from the public certificate (not shown) to encrypt the private key that encrypts the data (1725), and uses the server-side public key. The secret key encrypting the data is encrypted (1730).

The encryption function of the encryption processing unit 160 is referred to as E (Encryption), the server-side public key is encrypted with s1 (17erver side key), the secret key is r (random secret key), and the server-side public key. When the secret key is referred to as C (Ciphertext), the encryption function of the encryption processing unit 160 may be expressed by an expression such as "Es1 (r) = C".

According to the exemplary embodiment of the present invention, the encryption processing unit 160 encrypts the secret key through the server-side public key: RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), It is preferable to include at least one or more of DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, in addition to various encryption algorithms may be used, the present invention by a specific encryption algorithm This is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the undisclosed prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit 160 may be expressed as" C = Es1 (r) = re mod n ".

The data digest encrypted with the device-side private key and a copy of a certificate including the device-side public key are linked and encrypted via the generated secret key, and the secret key is encrypted via the server-side public key. The encryption processing unit 160 may include a private key encrypted with the server-side public key and a copy of a certificate including the message digest encrypted with the secret key and the device-side private key, and the device-side public key. In association with each other to generate predetermined transaction data, wherein the transaction data is included in a predetermined communication packet at a top layer on a communication protocol stack provided in the terminal 100 and provided to a lower layer of a next step, wherein the communication packet is When the logical switching control layer is reached, the logical switching control layer By providing a communication packet including transaction data by switching to a lower protocol layer corresponding to a wired communication network (or a wireless communication network) to which the terminal 100 is currently connected, providing the communication packet with a wired network (or to which the terminal 100 is connected). To a server (and / or terminal 100) on a wireless network).

FIG. 18 is a diagram illustrating a method of decrypting data received encrypted by a server (and / or terminal 100) by a key exchange method according to an embodiment of the present invention.

In more detail, FIG. 18 illustrates a server (and / or terminal) that receives transaction data including encrypted data from a terminal 100 having an encryption function as shown in FIGS. 2 and / or 3 and / or 4. 100)) is a method for decrypting the transaction data in a key exchange method, and if the present invention belongs to a general knowledge, the terminal 100 by referring to and / or modified with reference to FIG. In the present invention, various implementation methods for decrypting the transaction data encrypted by the key exchange scheme may be inferred by the same key exchange scheme. However, the present invention includes all the inferred implementation methods, and as shown in FIG. It is not limited.

In FIG. 18 according to an embodiment of the present invention, a server-side private key and a device-side public key for decrypting the transaction data in a key exchange method are provided with the public certificate provided in the server (and / or terminal 100). It is preferable to read from the drawing, and the public certificate (not shown) is preferably stored in a predetermined database (not shown) that interworks with the server (and / or the terminal 100), whereby the present invention. This is not limited.

Referring to FIG. 18, the server (and / or terminal 100) receives at least one packet including the encrypted data (1805), and the server to decrypt the secret key encrypted with the server-side public key (And / or extracting the server-side private key from the certificate of authenticity (not shown) provided in the terminal 100 (1810), and decrypting the secret key through the server-side private key (1815), The secret key for decrypting a copy of the certificate including the data digest encrypted with the data and the device-side private key and the device-side public key is extracted (1820).

Here, the decryption function of the server (and / or terminal 100) is called D (Decryption), the server-side private key is s2 (17erver side key), and the secret key encrypted with the server-side public key is C (Ciphertext). And a secret key decrypted with the server-side private key is r (random secret key), the function of decrypting the encrypted secret key by the server (and / or terminal 100) is "Ds2 = r, or Ds2 (Es1 (r)) = r ".

According to an embodiment of the present invention, an algorithm for the server (and / or terminal 100) to decrypt the secret key encrypted with the server-side public key in the terminal 100 through the server-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although a decryption algorithm may be used, the decryption algorithm is matched with an encryption algorithm used in the terminal 100, and the present invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decryption function of the server (and / or the terminal 100) may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the server (and / or terminal 100) includes the message digest and the device side public key encrypted with the data and the device side private key using the extracted secret key. By decrypting the certificate copy (1825), a certificate copy is extracted that includes the data encrypted with the secret key, the message digest encrypted with the device side private key, and the device side public key.

Here, the decryption function of the server (and / or terminal 100) is called D (Decryption), and the secret key is encrypted with r (random secret key), data encrypted with the secret key, and the device-side private key. C (Ciphertext) is a copy of the certificate containing the message digest and the device-side public key, and P (Plaintext) is a copy of the certificate containing the message digest and the device-side public key encrypted with the decrypted data and the device-side private key. ), The server (and / or terminal 100) decrypts a copy of the certificate including the message digest and the device-side public key encrypted with the encrypted data and the device-side private key is " Dr = P or Dr (Er (P)) = P ".

According to an embodiment of the present invention, a certificate in which the server (and / or terminal 100) includes the message digest and the device side public key encrypted with the encrypted data and the device side private key via the secret key. Algorithm for decrypting the copy is preferably made of at least one or more of SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, International Data Encryption Algorithm (IDEA), in addition to various types of decryption algorithm However, the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the terminal 100, the invention is not limited by a specific decryption algorithm.

Further, the server (and / or terminal 100) generates and transmits from the data at the terminal 100 by decrypting the message digest encrypted with the device side private key (1830) via the device side public key. One message digest is extracted (1835).

Here, the decryption function of the server (and / or terminal 100) is called D (Decryption), the device side public key is t2 (18erminal side key), and the message digest encrypted with the device side private key is C (Ciphertext). And the message digest decrypted with the device-side public key is m (Message Digest), the function of the server (and / or terminal 100) decrypting the encrypted message digest is " Dt2 = m, or Dt2. It can be expressed by an expression such as (Es1 (r)) = m ".

According to an embodiment of the present invention, an algorithm in which the server (and / or terminal 100) decrypts a message digest encrypted by the device-side private key in the terminal 100 through the device-side public key is RSA (Ron). Rivest, Adi Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although a decryption algorithm may be used, the decryption algorithm is matched with an encryption algorithm used in the terminal 100, and the present invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decryption function of the server (and / or the terminal 100) may be expressed as" P = Dt2 = Cd mod n ".

Thereafter, the server (and / or terminal 100) generates the predetermined message digest through the same one-way hash function with the received data (1840), and then generates the message digest with the generated message digest. By comparing the decrypted message digest (1845), the validity of the received data is verified.

If the generated message digest and the decrypted message digest match, the server (and / or terminal 100) confirms that the decrypted data is valid.

19 is a diagram illustrating a process of loading a logical switching layer providing an integrated processing function of a communication protocol stack to a terminal 100 according to a preferred embodiment of the present invention.

In more detail, FIG. 19 is provided with the integrated processing function of the communication protocol stack according to the present invention during the system booting process in the terminal 100 shown in FIGS. 2 and / or 3 and / or 4 ( For example, a method of driving a protocol processing routine (including a logical switching control layer) to be loaded into the control unit 105 provided in the terminal 100 is illustrated. The present invention can be inferred from various implementation methods of loading a logical switching layer that provides the integrated processing function of the communication protocol stack to the terminal 100 by referring to and / or modifying the present invention. It includes all the implementation methods inferred above, and is not limited to the implementation method shown in FIG.

For example, those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 19 so that the terminal 100 shown in FIGS. 2 and / or 3 and / or 4 is system booted. After a predetermined communication protocol stack integration processing command, the control unit 105 provided in the terminal 100 is provided with an integrated processing function of the communication protocol stack according to the present invention (eg, including a logical switching control layer). It would be possible to infer an implementation method for loading a protocol processing routine, but the present invention includes all implementation methods inferred from the above, and is not limited to the implementation method shown in FIG.

Referring to FIG. 19, while a predetermined power is supplied to the terminal 100 to perform a system booting procedure (1900), the terminal 100 includes a logical switching control layer according to the present invention during the system booting. A protocol processing routine is loaded into the controller 105 (1905).

Then, the terminal 100 from the memory unit 155 (and / or IC chip) the subscriber information corresponding to the preferred access communication network (for example, the communication network corresponding to the main communication protocol corresponding to the terminal 100) and And / or extract communication parameter information (1910), and access to the preferred access network via a logical switching control layer included in the loaded protocol processing routine based on the extracted subscriber information and / or communication parameter information. / Or communication connection) (1915).

If a connection (and / or communication connection) attempt to the communication network fails (1920), the terminal 100 communicates with the terminal 100 from the memory unit 155 (and / or IC chip). Extracting subscriber information and / or communication parameter information for another communication network corresponding to a processing function (1925), and logical switching control included in the loaded protocol processing routine based on the extracted subscriber information and / or communication parameter information A connection (and / or communication connection) to the communication network is attempted through the layer (1915).

If the connection (and / or communication connection) attempt to the communication network is successful (1920), the terminal 100 accesses the upper protocol layer (eg, the logical switching) through a logical switching control layer included in the protocol processing routine. A protocol layer provided above a layer provided with a control layer and a lower protocol layer corresponding to a communication network to which the terminal 100 is currently connected (for example, a protocol layer provided below a layer provided with the logical switching control layer). (1930), and then the terminal 100 connects a predetermined communication channel with at least one server (and / or terminal 100) through a currently connected communication network and at least one communication. Send and receive packets.

20 is a diagram illustrating a process of transmitting predetermined encrypted data through an integrated processing function of a communication protocol stack provided in the terminal 100 according to an exemplary embodiment of the present invention.

More specifically, FIG. 20 illustrates an integrated processing function of a communication protocol stack according to the present invention through a system booting process as shown in FIG. 19 in the terminal 100 illustrated in FIGS. 2 and / or 3 and / or 4. For example, after a protocol processing routine including a logical switching control layer is driven, data encrypted in the same manner as in FIGS. 11 and / or 13 and / or 15 and / or 17 may be integrated into the protocol stack. 20 illustrates a preferred method of transmitting predetermined encrypted data through a communication network to which the terminal 100 is currently connected through a function, and a person having ordinary knowledge in the art to which the present invention pertains may refer to FIG. Various implementations of transmitting predetermined encrypted data through the integrated processing function of the communication protocol stack in the terminal 100 by referring to and / or modifying Would be able to derive a method, the present invention includes all embodiments in which the inference method, not limited to the exemplary method shown in the figure 20.

Referring to FIG. 20, after the protocol processing routine including the integrated processing function (eg, logical switching control layer) of the communication protocol stack according to the present invention is driven in the terminal 100 through the same process as in FIG. 19, If predetermined data is encrypted in the same manner as in Fig. 11 and / or Fig. 13 and / or Fig. 15 and / or Fig. 17, the encrypted data includes the encrypted data from the uppermost layer through the protocol processing routine. A predetermined communication packet is generated and transmitted to the external communication network through a process provided to a lower layer of the next step, wherein the logical switching control layer of the terminal 100 uses an encrypted data transmission function corresponding to an upper layer. It is periodically checked whether a predetermined communication packet is generated and provided to the logical switching control layer (2000).

If a transmission communication packet generated through an encrypted data transmission function in an upper layer of the logical switching control layer is provided to the logical switching control layer (2005), the logical switching control layer of the terminal 100 is assigned to the upper layer. Check whether to change the transmission communication packet structure provided from the protocol layer.

For example, an upper protocol layer of the logical switching control layer is a protocol layer corresponding to the preferred access communication network of the terminal 100, and a lower layer of the logical switching control layer also corresponds to a preferred access communication network of the terminal 100. If so, it is not necessary to change the transmission communication packet structure.

While the upper protocol layer of the logical switching control layer is a protocol layer corresponding to the preferred access communication network of the terminal 100, the lower layer of the logical switching control layer is other than the protocol corresponding to the preferred access communication network of the terminal 100. If it contains another protocol layer, the transmission communication packet should be changed to an encrypted data structure corresponding to the lower protocol layer of the logical switching control layer.

If it is determined that the transmission communication packet does not need to be changed (2015), the logical switching control layer of the terminal 100 provides the transmission communication packet provided from the upper protocol layer to a lower layer of the logical switching control layer. A protocol processing routine corresponding to a lower layer of the logical switching control layer of the terminal 100 performs a function of transmitting the transmission communication packet through a communication network to which the terminal 100 is currently connected (2035). Thus, the terminal 100 transmits predetermined encrypted data to the communication network to which the terminal 100 is currently connected through the integrated processing function of the communication protocol stack according to the present invention.

On the other hand, if it is determined that the transmission communication packet should be changed (2015), the logical switching control layer of the terminal 100 corresponds to the communication network to which the terminal 100 currently accesses the transmission communication packet provided from the upper protocol layer. 2020 to a structure (and / or a structure that can be provided to a lower layer switched through the logical switching control layer).

Thereafter, the logical switching control layer of the terminal 100 provides the converted transmission communication packet to a lower layer of the logical switching control layer (2030) and corresponds to a lower layer of the logical switching control layer of the terminal 100. The protocol processing routine performs a function of transmitting the transmission communication packet through a communication network to which the terminal 100 is currently connected (2035), thereby integrating processing of the communication protocol stack according to the present invention in the terminal 100. Through the function, predetermined encrypted data is transmitted to the communication network to which the terminal 100 is currently connected.

Thereafter, the server (and / or the terminal 100) receiving the encrypted data receives the encrypted data through a decryption process as shown in FIGS. 12 and / or 14 and / or 16 and / or 18. Decrypt

21 is a diagram illustrating a process of receiving predetermined encrypted data through an integrated processing function of a communication protocol stack provided in the terminal 100 according to an exemplary embodiment of the present invention.

More specifically, FIG. 21 shows an integrated processing function of the communication protocol stack according to the present invention through a system booting process as shown in FIG. 19 in the terminal 100 shown in FIGS. 2 and / or 3 and / or 4. For example, after a protocol processing routine including a logical switching control layer is driven, the terminal 100 may receive predetermined encrypted data through a communication network to which the terminal 100 is currently connected through the integrated processing function of the protocol stack. As a method of illustration, those of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 21 to obtain predetermined encryption through the integrated processing function of the communication protocol stack in the terminal 100. It will be possible to infer various implementation methods for receiving the collected data, but the present invention includes all implementation methods inferred from the above, FIG. It is not limited to the illustrated exemplary method.

According to an embodiment of the present invention, the server (and / or terminal 100) may have a symmetric key (or secret key) encryption scheme similar to that of FIG. 11, and / or a public key encryption scheme similar to that of FIG. The predetermined data is encrypted and transmitted to the terminal 100 through at least one of an electronic envelope encryption scheme similar to FIG. 15 and / or a key exchange encryption scheme similar to FIG.

Referring to FIG. 21, after the protocol processing routine including the integrated processing function (eg, logical switching control layer) of the communication protocol stack according to the present invention is driven in the terminal 100 through the same process as in FIG. 19, The encrypted data received by the terminal 100 from an external communication network includes the encrypted data from a lowermost layer (eg, a MAC layer corresponding to a physical layer and / or an encrypted datalink layer) through the protocol processing routine. Receives a predetermined communication packet through a process provided to the upper layer of the next step, wherein the logical switching control layer of the terminal 100 is a predetermined communication packet through an encrypted data reception function corresponding to the lower layer Periodically check whether the received and provided to the logical switching control layer (2100).

If a received communication packet is provided to the logical switching control layer by performing a predetermined encrypted data reception function at a lower layer of the logical switching control layer (2105), the logical switching control layer of the terminal 100 is configured as the lower protocol. Check whether to change the structure of the received communication packet provided from the layer.

For example, a lower protocol layer of the logical switching control layer is a protocol layer corresponding to a preferred access communication network of the terminal 100, and a higher layer of the logical switching control layer also corresponds to a preferred access communication network of the terminal 100. If so, it is not necessary to change the received communication packet structure.

While the lower protocol layer of the logical switching control layer is a protocol layer corresponding to the preferred access communication network of the terminal 100, the upper layer of the logical switching control layer is other than the protocol corresponding to the preferred access communication network of the terminal 100. If it contains another protocol layer, the received communication packet should be changed to an encrypted data structure corresponding to the higher protocol layer of the logical switching control layer.

If it is determined that the received communication packet does not need to be changed (2115), the logical switching control layer of the terminal 100 provides the received communication packet provided from the lower protocol layer to an upper layer of the logical switching control layer. 2120, a protocol processing routine corresponding to an upper layer of the logical switching control layer of the terminal 100 performs an encrypted data reception function for the received communication packet received from a communication network to which the terminal 100 is currently connected. (2135), whereby the predetermined encrypted data is received from the communication network to which the terminal 100 is connected through the integrated processing function of the communication protocol stack according to the present invention.

On the other hand, if it is determined that the received communication packet is to be changed (2115), the logical switching control layer of the terminal 100 has a structure corresponding to the higher protocol layer of the received communication packet provided from the lower protocol layer ( And / or a structure capable of being provided to an upper layer switched through the logical switching control layer) (2125).

Thereafter, the logical switching control layer of the terminal 100 provides the converted received communication packet to an upper layer of the logical switching control layer (2130), and corresponds to an upper layer of the logical switching control layer of the terminal 100. The protocol processing routine for performing the encrypted data reception function for the received communication packet received from the communication network to which the terminal 100 is currently connected (2135), thereby integrating the integrated processing function of the communication protocol stack according to the present invention. Through the communication network to which the terminal 100 is connected, predetermined encrypted data is received and processed.

According to an embodiment of the present invention, the encrypted data receiving function preferably includes decrypting the encrypted and received data.

22 is a diagram illustrating a process of loading a program for providing a switching function of a communication protocol stack to a terminal 100 according to a preferred embodiment of the present invention.

More specifically, Fig. 22 downloads a predetermined program corresponding to a switching function of a communication protocol stack according to the present invention by accessing a predetermined ESD server through the communication network currently connected by a terminal 100 connected to a predetermined communication network. By mounting the device, the process of having a switching function of a communication protocol stack as shown in FIG. 2 and / or FIG. 3 and / or FIG. 4 to connect to a network configuration as shown in FIG. Those skilled in the art may infer various implementation methods for a program loading process for providing a switching function of a communication protocol stack to the terminal 100 by referring to and / or modifying the drawing 22. It will be appreciated that the present invention encompasses all of the inferred practice methods, and is not limited to the practice method shown in FIG. The.

Hereinafter, in FIG. 22, the ESD server is referred to as "server" for convenience, and the terminal 100 is referred to as "terminal" for convenience.

Referring to FIG. 22, the terminal accesses the server through a currently connected communication network, connects a predetermined communication channel, and performs a member registration and / or login procedure with the server (2200). In order to download and mount a predetermined program corresponding to the switching function of the communication protocol stack, the server requests a network-based program to be loaded (2205), and correspondingly, the server inputs and provides predetermined terminal information to the terminal. The terminal provides a terminal information providing interface (2210), and the terminal inputs (or selects or extracts from the memory unit) the terminal information through the terminal information providing interface and provides the terminal to the server through the communication network (2215). ).

Here, the terminal information includes at least one device model information and / or operating system information for the terminal.

According to another exemplary embodiment of the present invention, the server does not provide the terminal information providing interface to the terminal, and a network operating apparatus (eg, the CDMA-based mobile terminal is a mobile communication terminal) on the communication network to which the terminal is currently connected. When connected to a communication network, it is possible to extract terminal information corresponding to the terminal from at least one or more of the HLR / VLR (Home Location Register / Visitor Location Register) provided in the mobile communication network. It is not limited.

When the terminal information is obtained as described above, the server reads the terminal information and checks whether the program corresponding to the switching function of the communication protocol stack can be downloaded and mounted to the terminal through the communication network (2220).

According to an embodiment of the present invention, in order to download and mount a program corresponding to a switching function of a communication protocol stack to the terminal, the terminal may be software-connected so that the terminal may access at least two communication networks through the switching function of the communication protocol stack. A controlled communication module (for example, in the case of a wireless communication module, should be provided with a software module for controlling frequency bands and / or for controlling a part of a communication protocol layer), the server may include the terminal information. By confirming the device model information from the terminal, it is preferable to confirm whether the program corresponding to the switching function of the communication protocol stack can be downloaded to the terminal and loaded.

Also, in order to download and mount a program corresponding to a switching function of a communication protocol stack to the terminal, the terminal may be operated on an operating system corresponding to the terminal on the server (or a predetermined database associated with the server). A predetermined program should be provided. It is preferable that the server checks the operating system information from the terminal information to check whether the program corresponding to the switching function of the communication protocol stack can be downloaded and mounted on the terminal.

If the check result indicates that the program corresponding to the switching function of the communication protocol stack cannot be downloaded to the terminal (2225), the server generates predetermined program loading error information and transmits the predetermined program loading error information to the terminal through the communication network. 2230, and the process of downloading and loading the program corresponding to the switching function of the communication protocol stack to the terminal is terminated.

On the other hand, if it is determined that the program corresponding to the switching function of the communication protocol stack can be downloaded and mounted to the terminal (2225), the server downloads a predetermined program file designed to provide the switching function of the communication protocol stack to the terminal. Extraction (for example, extraction from a database in which the terminal information and the program file are cooperatively processed and stored) (2235), and the extracted program file is transmitted to the terminal through the communication channel (2240).

The terminal receiving the program file drives the program file to back up a program file corresponding to a protocol layer that is pre-installed and operated in the terminal (eg, connecting a communication channel between the terminal and the server). (2245).

According to an embodiment of the present invention, a method of backing up a program file corresponding to a protocol layer already installed and operating in the terminal, wherein the driven program file disconnects the communication channel between the terminal and the server, and the terminal And releasing the network connection to the currently connected communication network, terminating the program corresponding to the protocol layer already installed and operating in the terminal, and changing the name of the terminated program file. .

Thereafter, the terminal processes the protocol layer program corresponding to the driven program file as the backed up file (for example, a protocol layer program file previously installed and operated in the terminal) and installs the same in the terminal (2250). .

If the new protocol layer program installation procedure is completed as described above (2255), the terminal performs a system reboot procedure for updating the protocol layer by the driven program file (2260).

According to another exemplary embodiment of the present invention, when the terminal can update the program without system rebooting, the system rebooting procedure may be omitted, and the present invention is not limited thereto.

FIG. 23 is a diagram illustrating a process of authenticating validity after loading a program for providing a switching function of a communication protocol stack to a terminal 100 according to a preferred embodiment of the present invention.

More specifically, FIG. 23 downloads a protocol layer program corresponding to a switching function of a communication protocol stack from the ESD server through the process shown in FIG. 22, mounts the protocol layer program on the terminal 100, and then loads the terminal 100. In the process of authenticating whether the loaded new protocol layer program is operating normally, if the person having ordinary skill in the art to which the present invention pertains, referring to and / or modified in this figure 23 to the terminal 100 Although various implementation methods for authenticating validity of a mounted program may be inferred in order to provide a switching function of a communication protocol stack, the present invention includes all the inferred implementation methods, and is illustrated in FIG. 23. The method is not limited.

Hereinafter, in FIG. 22, the ESD server is referred to as "server" for convenience, and the terminal 100 is referred to as "terminal" for convenience.

Referring to FIG. 23, after the protocol layer program corresponding to the switching function of the communication protocol stack is downloaded and mounted from the ESD server through the same process as that of FIG. 22, the terminal (eg, the terminal in FIG. A program driven to mount a protocol layer program corresponding to the switching function of the communication protocol stack) attempts to access a network connected to the connected communication network before the protocol layer program is loaded based on the switching function of the communication protocol stack ( 2300).

According to an embodiment of the present invention, the protocol layer program mounted on the terminal to provide a switching function of the communication protocol stack provides a network access function for a communication network previously connected to the terminal, and attempts to connect to the network. The process is to authenticate its validity.

If the network access attempt fails (2305), the terminal restores the backed up protocol layer program (2310) and performs a system reboot procedure for the protocol layer recovery (2315).

According to another exemplary embodiment of the present invention, when the terminal can recover the program without rebooting the system, the system rebooting procedure may be omitted, and the present invention is not limited thereto.

On the other hand, if the network access attempt succeeds (2305), the terminal attempts to connect a communication channel with the server based on the switching function of the communication protocol stack (2320).

If the communication channel connection fails (2325),

On the other hand, if the communication channel connection is successful (2325), the terminal deletes the backed up protocol layer program (2330), so that the protocol layer program mounted on the terminal to provide a switching function of the communication protocol stack malfunctions. Prevent it.

24 illustrates a process of processing a predetermined financial transaction through a wired network and a wireless communication network based on a switching function of a communication protocol stack according to an exemplary embodiment of the present invention.

More specifically, FIG. 24 is a diagram illustrating a communication between a wired communication network and a wireless communication network during a financial transaction processing with a predetermined banking server while the terminal 100 equipped with a switching function of a communication protocol stack according to the present invention is connected to a wired communication network. When a change in the communication network occurs, the technical features of the switching function of the communication protocol stack through the process of the financial transaction processing through a wireless communication network, if the person of ordinary skill in the art Although various service methods for the switching function of the communication protocol stack provided in the terminal 100 may be inferred by referring to and / or modifying the drawing 24, the present invention includes all the inferred service methods. The implementation method shown in FIG. 24 is not limited.

In addition, in the embodiment illustrated in FIG. 24, the communication network to which the terminal 100 is currently connected may be a wireless communication network, and the communication network changed from the wireless communication network may be a wired communication network, and the present invention is not limited thereto.

Hereinafter, in FIG. 24, the wired communication network is referred to as a "first communication network" for convenience, and the wireless communication network is referred to as a "second communication network" for convenience, and the terminal 100 equipped with the function of the present invention is called "terminal" for convenience. The banking server connected to the terminal 100 through the wired communication network and / or the wireless communication network is referred to as "server" for convenience.

Referring to FIG. 24, the terminal connects a predetermined banking channel with the server through a first communication network (2400), and processes at least one financial transaction with the server through the banking channel (2405).

Here, the banking channel is a communication channel provided with an end-to-end encryption / decryption function between the terminal and the server, and the end-to-end encryption / decryption function is processed independently of the first communication network and / or the second communication network. The security function is maintained even by the network change through the switching function of the communication protocol stack.

During the financial transaction process, the terminal checks whether the communication network is changed from the first communication network to a predetermined second communication network through the switching function of the communication protocol stack (2410).

According to an embodiment of the present invention, the communication network change may be changed to a broadband handoff function and / or a quality of service guarantee function between the first communication network and the second communication network defined in the switching function of the communication protocol stack. .

If the network change is not confirmed (2415), the terminal checks whether the content download from the server is completed (2445), if the financial transaction processing is not completed (2450), the terminal is the banking channel The process of processing the financial transaction with the server is maintained until the financial transaction is completed.

On the other hand, if the communication network change is confirmed (2415), the terminal backs up the communication session from the banking channel connected to the server through the first communication network based on the switching function of the communication protocol stack (2420), and also the communication protocol The communication network is changed from the first communication network to the second communication network based on the switching function of the stack (2425).

According to the embodiment of the present invention, the communication network change includes a network connection release to the first communication network and a network connection process to the second communication network.

If the network change is completed (2430), the terminal restores the backed up communication session to the second communication network based on the switching function of the communication protocol stack (2435), and based on the restored communication session 2, the banking channel is connected to the server through a communication network (2440).

At this time, since the server maintains a communication session with the terminal, the terminal may continue to process the financial transaction with the server through a banking channel connected through the second communication network. It should be shorter than the communication session release period defined in the server.

Thereafter, the terminal checks whether the financial transaction processing is completed from the server (2445). If the financial transaction processing is not completed (2450), the terminal processes the financial transaction with the server through the banking channel. The process is maintained until the financial transaction is completed.

On the other hand, if the financial transaction processing is not completed (2450), the terminal releases the banking channel (for example, end-to-end encryption / decryption function) for the financial transaction processing from the server (2455).

According to the present invention, a terminal device having at least one wired communication function and a wireless communication function logically switches an upper protocol layer and at least two lower protocol layers on a protocol stack corresponding to the wireless communication function and a wired communication function. By providing a logical switching control layer and having a secure communication function corresponding to an end-to-end cryptographic scheme through the logical switching control layer, the terminal device is in addition to the secure communication function included in the currently connected wired and / or wireless communication network. There is an advantage of transmitting and receiving certain data safely and reliably.

According to the present invention, switching is performed in the protocol stack, so that it is horizontal regardless of a specific frequency band and a specific multiple access technology (CDMA, complex pi-sigma network (CPDMA), 802.11x, 802.16x, WCDMA, OFDMA, etc.) It is possible to perform handoff between base stations) or vertical (different frequency bands and different access technologies) in connection technology such as frequency band, so when adding VoIP function, one terminal can be used for game or voice call without interruption. The mobile station can be transferred to a frequency band or access technology having an optimal transmission rate. In particular, when transferring from a specific wireless carrier area to a wireless LAN (802, 11x) area, there may be a difference in communication costs. Can be. For example, in the 802.11x region Hotspot, PC use for the Internet is free, but when VoIP function is added, voice calls are also free in the same Hotspot, and calls to other places are inserted in front of the fixed fee internet subscription fee. Significant call cost is reduced, so when the terminal with the Internet function and VoIP function of the existing CDMA or WCDMA and GSM terminal enters the hotspot area, the economical movement of communication costs occurs, thus saving the national communication costs. It will help the economy, and you will have customers who find a hotspot, and you can expect sales to increase.

Claims (12)

A terminal device having at least one wired communication function and a wireless communication function, Logically switching an upper protocol layer and a lower protocol layer corresponding to at least one or more wired communication protocols and / or a lower protocol layer corresponding to a wireless communication protocol on a protocol stack corresponding to at least one or more wired communication functions and / or wireless communication functions Switching unit to; And an encryption processing unit for encrypting data to be transmitted through the currently connected communication network among the at least one wired communication network and / or the wireless communication network. The switching unit, When a communication packet including the encrypted data reaches the logical switching control layer, the communication packet is switched to a lower protocol layer corresponding to a currently connected communication network to provide the communication packet. Terminal device for providing end-to-end secure communication between a communication network and a wireless communication network. The method of claim 1, wherein the terminal device, And a protocol control unit for selecting and controlling a communication protocol for switching the communication packet including the encrypted data to a lower protocol layer corresponding to a currently connected communication network. Terminal device for providing end-to-end secure communication between a communication network and a wireless communication network. The method of claim 1, wherein the terminal device, A memory unit (and / or) for storing respective subscriber information and communication parameter information corresponding to at least two or more communication networks accessible by the terminal device through at least one wireless communication function and / or a wired communication function And an end-to-end secure communication between a wired communication network and a wireless communication network using a switching function of a communication protocol stack. A computer-readable recording medium having recorded thereon a program for executing a function of a terminal component according to any one of claims 1 to 3. In the end-to-end secure communication method of a wired communication network and a wireless communication network using a switching function of the communication protocol stack, A lower protocol layer and / or wireless corresponding to an upper protocol layer and at least one wired communication protocol on a protocol stack corresponding to the wired communication function and / or the wireless communication function, having at least one wired communication function and a wireless communication function; Encrypting data to be transmitted through a currently connected communication network among the at least one wired and / or wireless communication network in a terminal device having a logical switching control layer for logically switching a lower protocol layer corresponding to a communication protocol; And And when the communication packet including the encrypted data reaches the logical switching control layer, switching and providing, by the terminal apparatus, the communication packet to a lower protocol layer corresponding to a currently connected communication network. End-to-end secure communication method of a wired communication network and a wireless communication network using a switching function of the communication protocol stack. The method of claim 5, wherein the encrypted data, Symmetric key (and / or secret key) cryptography, and / or Public key cryptography, and / or Key exchange encryption, and / or An end-to-end secure communication method of a wired communication network and a wireless communication network using a switching function of a communication protocol stack, characterized by being encrypted through at least one encryption method among electronic envelope encryption methods. The method of claim 5, wherein the encrypted data, End-to-end secure communication method of a wired communication network and a wireless communication network using a switching function of a communication protocol stack, characterized in that the decrypted in the server (and / or terminal) receiving the communication packet containing the encrypted data. The method of claim 5, wherein the logical switching control layer, End-to-end secure communication method of a wired communication network and a wireless communication network using a switching function of the communication protocol stack, characterized in that provided in the same protocol layer on at least two or more protocol layers corresponding to the wireless communication function and / or wired communication function. The method of claim 5, wherein the logical switching control layer, Wired using the switching function of the communication protocol stack, the upper protocol layer on the protocol stack corresponding to the wireless communication function and / or wired communication function to switch to a lower protocol layer corresponding to the communication network currently connected to the terminal device End-to-end secure communication method between communication network and wireless communication network. The method of claim 5, wherein the logical switching control layer, Converting a transmission communication packet generated and provided in an upper protocol layer on a protocol stack corresponding to the wireless communication function and / or a wired communication function into a packet structure corresponding to a lower protocol layer corresponding to a communication network to which the terminal apparatus is currently connected; An end-to-end secure communication method for a wired communication network and a wireless communication network using a switching function of a communication protocol stack, further comprising a function. The method of claim 5, wherein the logical switching control layer, A function of converting a received communication packet received from a communication network connected to the terminal apparatus on a protocol stack corresponding to the wireless communication function and / or a wired communication function and provided from the lower protocol layer into a packet structure corresponding to the upper protocol layer. End-to-end secure communication method of a wired communication network and a wireless communication network using a switching function of the communication protocol stack, further comprising. The method of claim 5, wherein the logical switching control layer, Provided at a higher layer of the datalink layer (and / or medium access control layer) on the communication protocol stack, and / or from a sublayer of the network layer, and / or Provided at an upper layer of the network layer on the communication protocol stack, and / or provided from a sublayer of the transport layer, and / or Provided in an upper layer of the transport layer on the communication protocol stack, and / or provided from a sublayer of the session layer, and / or The wired communication network and the wireless communication network using the switching function of the communication protocol stack, characterized in that it comprises at least one or more provided in the upper layer of the session layer on the communication protocol stack, and / or from the sub-layer of the presentation layer. End-to-end secure communication method.

Images