KR20090014626A - Supporting group-differenciated service system and the control method in wibro network system including network of different - Google Patents

Abstract

A service providing system based on a user group in a wibro network system having a different network and a control method thereof are provided to supply a service to a user terminal which wants to access to other networks through one access control router. An access control router(200) processes a signal and traffic of a user terminal(400) received through an RAS(Radio Access Station)(300). A contact point of CN is provided. The access control router checks a MAC address of the user terminal to detect a business network(100) that a user wants to receive. Subsequently, the access control router performs user authentication of the detected business network and assigns an IP address among IP address bands used in a corresponding business network to a corresponding user terminal. If a packet is received from the user terminal, the access control router checks and routes a source IP address of a corresponding packet.

Description

[Supporting group-differenciated service system and the control method in Wibro network system including network of different} in a WiBro network system with heterogeneous networks

A user who is joined to a heterogeneous network can receive service through the same WiBro device.

Referring to the structure of the conventional WiBro network system as shown in Figure 1, the user terminal (Personal Subscriber Station) and RAS (Radio Access Station) (400), access control router (Access Control Router) (200), CN (Core Network) (100) and the Wibro System Manager (WSM) 201, and the DNS (100), DNS (101), AAA (102), HA (103), DHCP (104) server is also configured. .

The user terminal 400 refers to a terminal carried by the user, and the RAS 300 provides a wireless interface for accessing the user terminal 400 to the WiBro network system.

The access control router 200 processes signals and traffic of the user terminal 400 received through the RAS 300 and serves to provide a contact point of the CN 100.

The WSM 201 is an element for management of the access control router 200 and the RAS 300.

During the configuration of the conventional WiBro network system, the access control router 200 is located between the user terminal 400 and the CN 100 to process various signals and bearer traffic and plays a most important network component. It can be seen.

The access control router 200 largely performs an IP networking function and a charging information collection function. To provide these various functions, it can handle various protocols such as RADIUS / DIAMETER, DNS, DHCP, IP, SNMP, FTP and Samsung internal standard Hia, Hbis.

In a WiBro network system having such a configuration, when a terminal wants to transmit a packet to a specific destination, the access control router 200 receives the packet of the terminal and routes the packet as defined in its routing table.

At this time, the access control router 200 routes the packet received from the user terminal 400 only through an interface connected with the CN 100.

Therefore, due to the existing technical characteristics, one access control router 200 has no choice but to support a service for a single operator or a single private network.

Therefore, the access control router 200 of the conventional WiBro network system transmits most of the packets received from the user terminal 400 to the interface connected to the CN 100 except for Hia traffic generated when a handover is performed. Done.

Of course, this is also because the general packet does not need to be transmitted to a network other than the CN 100, but that is why the WiBro network system itself is not considering matching with a network other than the CN 100.

Although the service of the WiBro network system is a service for receiving various services including an interface connected to the CN 100, recently, the user terminal 400 may access a specific network to provide services in which QoS and security are important. There is an increasing demand for this.

In this case, as a current function of the access control router 200, as shown in FIG. 1B, in order to connect with a WiBro terminal to a separate network, another access control router 200-1 located in each network 200-1. , 200-2).

That is, if there are two different networks 110 and 120 to be connected, they must be connected through different access control routers 200-1 and 200-2 respectively located in the two different networks 110 and 120.

This means that different access control routers 200-1 and 200-2 corresponding to networks are used to access these heterogeneous networks. In other words, in order for network operators or enterprise network operators to configure WiBro networks for themselves and provide their own security and QoS features, the operators and enterprise network operators must install access control routers for their networks. There was a problem.

Accordingly, an object of the present invention is to solve a conventional problem as described above, and an object of the present invention is to provide a WiBro having a heterogeneous network such that a service is provided to a user terminal that wants to access several different networks through one access control router. The present invention provides a user group based service providing system and a control method thereof in a network system.

According to an aspect of a user group-based service providing system in a WiBro network system having a heterogeneous network according to the present invention for achieving the above object, the operator network to check the MAC address information of the user terminal to access the service network Detects and performs user authentication of the detected operator network and assigns any IP address among the IP address bands used in the operator network to the corresponding user terminal, and when the packet is received from the user terminal, the source IP address of the packet It includes an access control router that checks and routes source IP address information.

The access control router may include: a user information confirming unit confirming MAC address information of a user terminal to access; A service network detection unit detecting a service provider network to receive a service by using MAC address information of the user terminal identified through the user information confirmation unit; A user authentication unit performing user authentication of a user terminal in a service provider network detected through the service network detection unit; A terminal IP allocator for allocating an arbitrary IP address of the IP address band used in the service provider network to the corresponding user terminal; And a routing processor that checks and routes source IP address information of the packet when the packet is received from the user terminal.

The user authentication unit includes a network information table including authentication priority information of an operator network. The user authentication unit sequentially authenticates user terminals according to network priorities registered in the network information table. Separate IP addresses.

The IP allocator includes an IP address table having IP address band information for each operator network. When the operator network is identified, the IP allocator allocates an arbitrary IP address among the IP address bands of the operator network to the user terminal.

According to an aspect of a user group-based service providing system control method in a WiBro network system having a heterogeneous network according to the present invention, the method includes: checking MAC address information of an accessing user terminal; Detecting a service provider network to which the user terminal is to receive service through the confirmed MAC address; Performing user authentication of the detected operator network; Allocating an IP address of an IP address band used in the service provider network to the corresponding user terminal; And when the packet is received from the user terminal, checks and routes source IP address information of the corresponding packet.

The performing of the user authentication includes a network information table including authentication priority information of an operator network, sequentially authenticates user terminals according to network priorities registered in the network information table, and corporate network. To distinguish between the IP address of the operator's network.

The step of allocating an IP address to the user terminal includes an IP address table having IP address band information for each service provider network. When the service provider network is identified, any IP address of the service provider network IP address band is applied. Assign to the user terminal.

As described above, in the WiBro network system having a heterogeneous network according to the present invention, a user group-based service providing system and a method of controlling the same are provided. This eliminates the need for a separate additional access control router, and enables the subscribers to receive both intranet services and public network core node (CN) services simultaneously without having to perform separate operations on their terminals.

Hereinafter, exemplary embodiments of a service group-based service providing system and a control method thereof in a WiBro network system having a heterogeneous network according to the present invention will be described in detail with reference to the accompanying drawings. At this time, it will be understood by those of ordinary skill in the art that the system configuration described below is a system cited for the purpose of the present invention and does not limit the present invention to the following system.

2 is a diagram illustrating a configuration of a user group based service providing system in a WiBro network system having a heterogeneous network according to the present invention, and a user group based service providing system in a WiBro network system having a heterogeneous network according to the present invention. Includes at least one operator network 100, an access control router 200, and at least one RAS 300. Here, the operator network 100 includes DNS 101, AAA 102, HA 103, and DHCP 104 servers.

As shown in FIG. 3, the access control router 200 includes a user information confirming unit 210, a service network detecting unit 220, a user authenticating unit 230, a terminal IP allocating unit 240, and a routing processing unit 250. ).

The user terminal 400 refers to a terminal carried by the user, and the RAS 300 provides a wireless interface for accessing the user terminal 400 to the WiBro network system.

WSM is an element for management of the access control router 200 and RAS (300).

The access control router 200 processes signals and traffic of the user terminal 400 received through the RAS 300 and performs a general role of providing a contact point of the CN.

In addition, the access control router 200 checks the MAC address information of the accessing user terminal 400, detects the operator network 100 to receive the service, and performs user authentication of the detected operator network 100. After doing so, assigns an arbitrary IP address of the IP address band used in the operator network 100 to the corresponding user terminal 400, and when a packet is received from the user terminal 400, source IP address of the packet (source IP). Check and route address information.

The user information checking unit 210 of the access control router 200 checks MAC address information of the accessing user terminal 400.

The service network detector 220 of the access control router 200 detects the operator network 100 to receive the service by using the MAC address information of the user terminal 400 confirmed through the user information checker 210. .

The user authentication unit 230 of the access control router 200 performs user authentication of the user terminal 400 in the operator network 100 detected through the service network detection unit 220. In this case, the user authentication unit 230 includes a network information table including the authentication priority information of the operator network 100, and sequentially the user terminal 400 according to the network priority registered in the network information table. Authentication and distinguishes the IP addresses of the corporate network 111 and the operator network 100.

In addition, the terminal IP allocating unit 240 of the access control router 200 allocates an arbitrary IP address among the IP address bands used in the operator network 100 to the corresponding user terminal 400. In this case, the IP allocator includes an IP address table having IP address band information for each operator network 100. When the operator network 100 is confirmed, any IP among the IP address bands of the operator network 100 is identified. The address is assigned to the user terminal 400.

When the packet is received from the user terminal 400, the routing processor 250 of the access control router 200 checks and routes source IP address information of the corresponding packet.

General functions and detailed operations of the above-described elements will be omitted, and the operations will be described based on operations corresponding to the present invention.

A WiBro network system having at least one operator network 100 is as shown in FIG. 2. That is, the operator network 100 includes each authentication server.

Therefore, when the user terminal 400 wants to access the access control router 200, the user information checking unit 210 of the access control router 200 receives the user terminal (the MAC message received from the user terminal 400). Check the MAC address information of 400).

Using the MAC address of the user terminal 400 checked through the user information checking unit 210, the service network detection unit 220 of the access control router 200 uses the MAC address information of the user terminal 400 to determine the corresponding user. The terminal 400 may determine which service provider network 100 the user terminal 400 wishes to receive service from. The service network detector 220 checks the MAC address information of the unique user terminal 400.

Thereafter, the user authentication unit 230 of the access control router 200 performs user authentication of the user terminal 400 in the operator network 100 detected through the service network detection unit 220. The authentication performed here may differ depending on the operator network 100.

In addition, since the user authentication unit 230 includes a network information table including authentication priority information of the operator network 100, the user authentication unit 230 sequentially determines the user terminal 400 according to the network priority registered in the network information table. Perform authentication.

The user authentication unit 230 distinguishes IP addresses of the corporate network 111 and the operator network 100.

The terminal IP allocating unit 240 of the access control router 200 assigns an arbitrary IP address among IP addresses of the operator network 100 band in which user authentication of the user terminal 400 is performed, to the corresponding user terminal 400. Assign to.

It is assumed that the IP address table provided by the terminal IP allocator 240 is as shown in Table 1 below.

Network area IP address information 1st carrier network IP band 165.213.109.XXX Second carrier network IP band 165.213.201.XXX 1st enterprise network IP band 192.168.111.XXX 2nd enterprise network IP band 192.168.150.XXX

If the user terminal 400 is a terminal to be connected to the first provider network 110, the terminal IP allocator 240 of the access control router 200 may use any one of 165.213.109.XXX. Assign.

Then, when receiving a packet from any user terminal 400, the routing processing unit 250 of the access control router 200 checks the source IP address (Source IP address) of the packet to the carrier network of the corresponding band ( Route the packet.

Accordingly, as shown in FIG. 4, the first user terminal 410, the second user terminal 420, and the third user terminal 430 may access the respective operator networks 110 and 120 or the enterprise through the access control router 200. After the network 111 is authenticated, an IP address corresponding to the operator network 110 or 120 or the corporate network 111 is allocated. That is, the first user terminal 410 is assigned 192.186.111.x to access the corporate network 111, and the second user terminal 420 accesses the first operator network 110. .x has been assigned, and the third user terminal 430 has been assigned 165.213.210.x by accessing the second provider network 120.

Then, when a packet is received from any of user terminals 410 to 430, the access control router 200 checks the source IP address of the packet and performs routing.

Therefore, when a packet is received from any user terminal (410 to 430), the access control router 200 checks the source IP address (192.186.111.x) of the packet and the IP address band (192.186) of the packet. The packet is routed to the corporate network 111 according to .111.xxx. If the packet is received from the second user terminal 420, the packet is removed when the source IP address (165.213.109.x) of the packet is confirmed. Routing to the first operator network 110, if receiving the packet from the third user terminal 430, if the source IP address (165.213.210.x) of the packet is confirmed, routing the packet to the second provider network 120 do.

Next, a method of controlling a user group based service providing system in a WiBro network system having a heterogeneous network according to the present invention having the above configuration will be described with reference to FIG. 5.

First, the access control router 200 checks the MAC address information of the user terminal 400 to access (S1).

Subsequently, the access control router 200 detects the operator network 100 to which the user terminal 400 is to receive service through the confirmed MAC address (S2).

The access control router 200 performs user authentication of the detected operator network 100 (S3). Here, the performing of the user authentication (S3) includes a network information table including the authentication priority information of the operator network 100, and sequentially the user terminal according to the network priority registered in the network information table. The authentication of 400 is performed, and the IP addresses of the corporate network 111 and the operator network 100 are distinguished.

Thereafter, the access control router 200 allocates an arbitrary IP address among the IP address bands used in the operator network 100 to the corresponding user terminal 400 (S4). At this time, the step of assigning the IP address to the user terminal 400 (S4), having an IP address table having the IP address band information for each operator network 100, if the operator network 100 is confirmed Any IP address of the IP address band of the operator network 100 is allocated to the user terminal 400.

Then, when the packet is received from the user terminal 400, the access control router 200 checks and routes source IP address information of the corresponding packet (S5).

Although the present invention has been described in detail only with respect to the specific embodiments described, it will be apparent to those skilled in the art that various changes and modifications can be made within the spirit of the present invention, and such modifications and modifications belong to the appended claims. .

Figure 1a is a functional block diagram showing the configuration of a conventional WiBro network system.

Figure 1b is a functional block diagram having a configuration of a conventional WiBro network system having a heterogeneous network.

2 is a functional block diagram illustrating a configuration of a user group based service providing system in a WiBro network system having a heterogeneous network according to the present invention.

3 is a functional block diagram illustrating a detailed configuration of an access control router in a user group based service providing system in a WiBro network system having a heterogeneous network according to FIG. 2;

4 is a diagram illustrating processing of a packet for each user terminal in a user group based service providing system in a WiBro network system having a heterogeneous network according to FIG. 2;

5 is a flowchart illustrating a method for controlling a user group based service providing system in a WiBro network system having a heterogeneous network according to the present invention.

<Explanation of symbols for the main parts of the drawings>

100, 110, 120: operator network 111: corporate network

200: access control router 300: RAS

Claims (9)

In the WiBro network system composed of at least one operator network, Check the MAC address information of the accessing user terminal to detect the operator's network to receive the service, perform user authentication of the detected operator's network, and select any IP address among the IP address bands used in the operator's network. User group-based service providing system in a WiBro network system having a heterogeneous network including an access control router which is assigned to and receives a packet from a user terminal and checks and routes source IP address information of the packet. . The method of claim 1, The access control router, A user information confirming unit confirming MAC address information of a user terminal to access; A service network detection unit detecting a service provider network to receive a service by using MAC address information of the user terminal identified through the user information confirmation unit; A user authentication unit for performing user authentication of a user terminal in a service provider network detected through the service network detection unit; A terminal IP allocator for allocating an arbitrary IP address of the IP address band used in the service provider network to the corresponding user terminal; And User group-based service providing system in a WiBro network system having a heterogeneous network including a routing processing unit that checks and routes source IP address information of a corresponding packet when a packet is received from a user terminal. The method of claim 2, The user authentication unit, WiBro network system having a heterogeneous network, comprising a network information table including authentication priority information of an operator network, and sequentially authenticating user terminals according to network priorities registered in the network information table. User Group based service provisioning system. The method according to claim 2 or 3, The user authentication unit, A user group based service providing system in a WiBro network system having a heterogeneous network, which distinguishes IP addresses of a corporate network and an operator network. The method of claim 2, The IP allocation unit, A heterogeneous network comprising an IP address table having IP address band information for each operator network, and when the operator network is identified, an arbitrary IP address among the IP address bands of the operator network is allocated to the corresponding user terminal. User group based service providing system in a WiBro network system having a. In a control method in a WiBro network system composed of at least one operator network, Checking MAC address information of an accessing user terminal; Detecting a service provider network to which the user terminal is to receive service through the confirmed MAC address; Performing user authentication of the detected operator network; Allocating an IP address of an IP address band used in the service provider network to the corresponding user terminal; And If a packet is received from a user terminal, the method of controlling a user group-based service providing system in a WiBro network system having a heterogeneous network comprising the step of identifying and routing source IP address information of the packet. The method of claim 6, Performing the user authentication, WiBro network system having a heterogeneous network, comprising a network information table including authentication priority information of an operator network, and sequentially authenticating user terminals according to network priorities registered in the network information table. User Group based service providing system control method in. The method according to claim 6 or 7, Performing the user authentication, A method for controlling a user group based service providing system in a WiBro network system having a heterogeneous network, characterized by distinguishing IP addresses of a corporate network and an operator network. The method of claim 6, Allocating an IP address to the user terminal, A heterogeneous network comprising an IP address table having IP address band information for each operator network, and when the operator network is identified, an arbitrary IP address among the IP address bands of the operator network is allocated to the corresponding user terminal. User group based service providing system control method in a WiBro network system having a.

Images