KR20090039154A - System and method for controlling unauthorized traffic in mobile communication network - Google Patents

Abstract

A system and a method for controlling unauthorized traffic in mobile communication network are provided to protect an existing circuit based voice call sales by allowing only authorized VoIP traffic to be passed while blocking unauthorized VoIP traffic. An unauthorized traffic control system comprises a traffic filtering device(400) and a traffic control device(500). The traffic filtering device stores a traffic of an internet protocol based transmitted through a mobile radio communications network(200) temporarily. The traffic filtering device requests a cut off of the traffic. According to the request of the traffic filtering device, the traffic control device determines whether it is the traffic in which the traffic which is temporarily stored to above statement is authorized with the predetermined decision criteria or not. According to the decision result of the traffic control device, the traffic filtering device allows or blocks the traffic.

Description

System and method for controlling unauthorized traffic in mobile communication network

The present invention relates to traffic control in a mobile communication network, and more particularly, an unauthorized application in a mobile communication network, which can protect an existing circuit-based voice call revenue by blocking VoIP traffic that is not properly authorized in the mobile communication network. A traffic control system and method are disclosed.

Today, there are three major mobile communication systems worldwide. First, the Global System for Mobile Communication (GSM) system centered on Europe, the second generation mobile communication system, and Second, the synchronous CDMA (Code Division Multiple Access) 2000 system centered on Korea and the US, the third generation system, and Third, Europe, the third generation system. The central UMTS (Universal Mobile Telecommunication Services) system is used.

UMTS, the third generation mobile communication system, is leading the standardization in the 3GPP (3 Generation Partnership Project), a standard developed by combining CDMA technology with European GSM. The UMTS mobile communication system has a big difference in that it does not use a Global Position System (GPS) for synchronization compared to other 3G system CDMA 2000 systems, and thus is called an asynchronous mobile communication system. The UMTS system integrates a variety of systems, including cellular, wireless telephone, wireless LAN and satellite communications, and provides international roaming to make calls anywhere in the world. In addition, it supports multimedia services such as voice and image data at variable rates of up to 2Mbps, and is used in the same requirements and the same frequency band as IMT-2000, such as interworking with various broadband networks.

Recently, the wideband code division multiple access system (WCDMA), which is being actively researched and commercialized for the construction of the future high-speed packet data transmission network in the technology evolution of the 3rd generation mobile communication system, uses a conventional GSM network structure. It has been evolved based on infrastructure, and compared with existing code division multiple access system (CDMA: Code Division Multiple Access) of the IS-95 (Interim Standard-95) series, it is relatively easy to synchronize between base stations. Not only is it advantageous in terms of infrastructure construction, but also the future market and growth potential of the technology is very high. That is, it is possible to provide various high quality multimedia data services that were available only in a wired network such as video telephony, streaming, video on demand (VoD), and voice over internet protocol (VoIP).

Among the multimedia data services described above, VoIP services that allow users to transmit voice traffic (telephone calls, faxes, data, etc.) to an Internet Protocol (hereinafter referred to as IP) network are widely used. However, when such VoIP service is used through a mobile communication network, only the authorized subscriber of the mobile network operator should be able to use it. In case of using VoIP service, which is a packet-based voice call service, it affects the voice call sales of mobile network operators. Therefore, there is a need for adequate control of such unauthorized VoIP traffic under certain conditions.

The present invention has been devised to solve the above problems, and the technical problem to be achieved by the present invention is to block VoIP traffic that is not properly authorized in the VoIP service provided through the mobile communication network, and only legitimately authorized VoIP traffic. The present invention provides an unauthorized traffic control system and method in a mobile communication network that can protect existing circuit-based voice call sales by passing.

The object of the present invention is not limited to the above-mentioned object, and other objects that are not mentioned will be clearly understood by those skilled in the art from the following description.

Unauthorized traffic control system in a mobile communication network according to an embodiment of the present invention for achieving the above object, temporarily stores the Internet protocol (IP) based traffic transmitted through the mobile communication network, and whether or not to block the traffic Requesting traffic filtering device; And a traffic control device for determining whether the temporarily stored traffic is a traffic authorized according to a predetermined criterion according to the request, wherein the traffic filtering device blocks the traffic according to a determination result of the traffic control device. Allow.

In addition, the unauthorized traffic control method in a mobile communication network according to an embodiment of the present invention for achieving the above object comprises the steps of: temporarily storing the Internet protocol (IP) based traffic transmitted through the mobile communication network; Determining whether the temporarily stored traffic is legitimately authorized traffic by a predetermined criterion; And blocking the traffic according to the determination result.

Specific details of other embodiments are included in the detailed description and drawings which will be described later.

According to the system and method for unauthorized traffic control in a mobile communication network according to an embodiment of the present invention as described above, one or more of the following effects exist.

In the VoIP service provided through a mobile communication network, it is possible to protect existing circuit-based voice call sales by blocking VoIP traffic that is not properly authorized and passing only legitimately authorized VoIP traffic.

The effects of the present invention are not limited to the above-mentioned effects, and other effects not mentioned will be clearly understood by those skilled in the art from the description of the claims.

Advantages and features of the present invention and methods for achieving them will be apparent with reference to the embodiments described below in detail with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but may be embodied in various different forms, and the present embodiments merely make the disclosure of the present invention complete, and are common in the art to which the present invention pertains. It is provided to inform those skilled in the art to the fullest extent of the invention and the invention is defined only by the scope of the claims. Like reference numerals refer to like elements throughout.

1 is a block diagram of an unauthorized traffic control system in a mobile communication network according to an embodiment of the present invention.

Referring to FIG. 1, the unauthorized traffic control system includes a mobile terminal 110 connected to a personal terminal 100, a wireless access network 200, a packet data node 300, a router 350, and a traffic filtering device ( 400, a traffic control device 500, a first storage device 510, and a second storage device 520.

The personal terminal 100 is a voice over internet protocol in a mobile communication network such as CDMA or WCDMA using a wireless Internet based on an operating system (OS) such as a notebook PC, a personal digital assistant (PDA), a palm PC, or the like. (Voice over Internet Protocol: hereinafter referred to as VoIP) means a terminal that can use the service.

The mobile terminal 110 may be a terminal capable of providing VoIP service in connection with the personal terminal 100, and includes a cellular phone, a personal communication service (PCS) phone, a PDA phone, a GSM phone, a CDMA-2000 phone, a WCDMA phone, The name is not limited to the DMB phone.

The radio access network (RAN) 200 serves to guarantee the mobility of the mobile terminal 110 and performs hand-off and radio resource management functions. The radio access network 200 is implemented by a Radio Transceiver Subsystem (RTS) and a Radio Network Controller (RNC) existing between a switch and a mobile node, and includes a circuit switch (MSC) and a visitor location register ( It may be configured to include a Visitor Location Register (VLR) and a Home Location Register (HLR).

A base station (RTS) performs a radio access termination function with a subscriber station conforming to the 3rd Generation Partnership Project (3GPP) radio access standard. Especially, in case of a 3G mobile communication network, Node B plays a role and moves to an uplink. Receives information transmitted from the physical layer of the terminal, and transmits data to the mobile terminal in the downlink, and serves as an access point for the mobile terminal to transmit and receive voice, video and data traffic.

The base station controller (RNC) performs functions such as wired and wireless channel management, protocol matching with subscriber stations, protocol matching between base stations, soft handoff processing, core network protocol processing, general packet radio service (GPRS) access, fault management, and system loading. In charge.

In addition, a device such as a circuit switch, a visitor location register, a home location register, or the like may be further included in the wireless access network 200, but a detailed description thereof will be omitted.

The packet data node 300 is a device located at the end of the wireless access network 200. In the case of a WCDMA network, the packet data node 300 includes a Serving GPRS Support Node (SGSN) and a Gateway GPRS Support Node (GGSN). Yes. SGSN has a hardware structure that provides Asynchronous Transfer Mode (ATM) -based switch and routing connection for GPRS service, and is a node in charge of data packet transmission with UE in service area. It also has functions such as packet routing and transmission, mobility management, logical link management, authentication and charging. GGSN is a node in charge of the connection function between GPRS backbone network and external packet data network. It converts GPRS packet from SGSN into appropriate packet data protocol (PDP) format (e.g. IP. X. 25) and transmits the incoming packet data. It converts the PDP address of the receiver to the GSM address of the receiver.

The router 350 is an apparatus that interconnects the packet data node 300 and the traffic filtering apparatus 400 to be described later to exchange data with each other, and determines an optimal path of the traffic flow to the traffic filtering apparatus 400. It serves to transmit.

The traffic filtering device 400 temporarily blocks the Internet protocol (IP) based traffic transmitted through the wireless access network 200 in a predetermined storage space, and then blocks the traffic to the traffic control device 500 to be described later. The request is made, and the traffic is blocked or allowed according to the determination result of the traffic control apparatus 500.

According to the request of the traffic filtering apparatus 400, the traffic control apparatus 500 determines whether the temporarily stored traffic is traffic legitimately authorized by a predetermined criterion. Here, the determination criteria for determining whether the traffic is legitimately authorized will be described later.

In addition, the traffic control device 500 obtains subscriber identification information from the first storage device 510 to be described later by using the Internet protocol (IP address) of the subscriber received from the traffic filtering device 400, and the obtained subscriber The identification information is used to obtain information on the subscriber station and information on whether the terminal is a subscriber to the wireless Internet service from the second storage device 520. In addition, the mobile terminal acquires and stores list information on a specific destination authorized by an operator providing a wireless Internet service or a mobile communication network or by agreement between the two operators.

Here, the subscriber identification information includes identification information such as an international mobile station identity (IMSI) and a mobile station international ISDN number (MSSI) of the subscriber. In addition, the information of the subscriber terminal means information about the terminal currently transmitting traffic to the traffic filtering device 400, the mobile terminal 110 is connected to the personal terminal 100 using the wireless Internet monthly service It can be said whether it is a VoIP phone or a CDMA phone or WCDMA phone that transmits IP packets.

In addition, the traffic control apparatus 500 may include a first determination process of determining whether the traffic temporarily stored in the traffic filtering apparatus 400 is generated by a terminal subscribed to a wireless Internet service (for example, a monthly fee service), A second determination step of determining whether the destination of the temporarily stored traffic is a pre-authorized destination, and a third determination step of determining whether the temporary stored traffic uses the VoIP standard protocol. If the temporarily stored traffic is traffic that does not use a Session Initiation Protocol (SIP) port (5060 port), a fourth determination process of determining whether the traffic is based on VoIP is performed by analyzing a traffic pattern. do.

In this case, the traffic filtering device 400 blocks or allows the traffic after the above-described determination process. That is, the traffic generated by the terminal subscribed to the wireless Internet service as a result of the first determination process is not an authorized destination as the result of the second determination process, and the standard protocol is used as a result of the third determination process. In this case, since the traffic cannot be regarded as legitimately authorized traffic, the traffic stored temporarily is blocked. In addition, if the traffic cannot be blocked as a result of the third determination process, the traffic does not use the standard VoIP protocol. Therefore, the fourth determination process is performed to determine whether the traffic is VoIP based through traffic pattern analysis. As a result, in case of VoIP-based traffic, traffic is temporarily not authorized, and thus, temporarily stored traffic is blocked.

The first storage device 510 is a device that stores the above-described subscriber identification information in a linked state using the traffic control device 500 and the Radius protocol, and at the request of the traffic control device 500. Provide identification information.

The second storage device 520 is also a device that stores information on the terminal and information on whether the terminal subscribes to the wireless Internet service in the interworking state using the traffic control device 500 and the Radius protocol. In response to the request of 500, information on the terminal and information on whether the terminal subscribes to the wireless Internet service is provided.

An unauthorized traffic control method will be described based on the function of each component of the aforementioned unauthorized traffic control system.

2 is a call flow diagram of an unauthorized traffic control method in a mobile communication network according to an embodiment of the present invention.

Referring to FIG. 2, first, the mobile terminal 110 requests the PDP context from the packet data node 300 (S102), and the packet data node 300 transmits the PDP context in response thereto (S104). . Through this process, a transmission channel (TrCH) is established between the mobile terminal 110 and the base station controller (not shown) of the wireless access network 200 (S106). The mobile terminal 110 transmits the IP-based traffic using the set transport channel, and the traffic arrives at the traffic filtering apparatus 400 through the wireless access network 200 and the packet data node 300 ( S108).

The traffic filtering apparatus 400 temporarily buffers the transmitted IP-based traffic (S110). Then, the traffic control device 500 is requested to determine whether to block the temporarily stored traffic while providing subscriber IP address information (S112).

In response to the request, the traffic control apparatus 500 requests subscriber identification information corresponding to the IP address while providing the subscriber's IP address to the first storage device 510 (S114). In response, the first storage device 510 provides the subscriber identification information corresponding to the IP address to the traffic control device 500 (S116). Here, the subscriber identification information refers to identification information such as an international mobile station identity (IMSI) and a mobile station international ISDN number (MSISDN) of the subscriber.

The traffic control apparatus 500 provides the subscriber identification information thus obtained to the second storage device 520 and requests the terminal information used by the subscriber and information on whether the subscriber subscribes to the wireless Internet service. (S118). The second storage device 520 provides, to the traffic control device 500, terminal information corresponding to the subscriber identification information and information on whether to subscribe to a wireless Internet service (S120). Here, the terminal information means information on the mobile terminal 110 that is currently transmitting traffic to the traffic filtering apparatus 400, and the mobile terminal 110 uses the wireless Internet monthly service. Information about whether it is a VoIP phone connected to a CDMA phone or a WCDMA phone that is simply transmitting an IP packet.

In addition, the traffic control apparatus 500 obtains traffic destination information legitimately authorized by the operator providing the wireless Internet service and the operator of the mobile communication network (S122).

Thereafter, the traffic control apparatus 500 undergoes a process of determining whether the temporarily stored traffic is a legitimately authorized traffic (S124), and transmits a response to whether the traffic is blocked to the traffic filtering apparatus 400. In operation S126, the traffic filtering apparatus 400 blocks or allows the traffic according to the determination result.

Now, the above-described determination process will be described with reference to FIG. 3. 3 is a flowchart illustrating a process of determining unauthorized traffic blocking according to an embodiment of the present invention.

First, it is determined whether the temporarily stored traffic is traffic generated by a terminal subscribed to a wireless internet service (for example, a monthly fee wireless internet service) (first determination process, S202).

As a result, if the traffic is not by the terminal subscribed to the wireless Internet service, the traffic is not authorized (S204). If the traffic is by the terminal subscribed to the wireless Internet service, the temporary stored traffic It is determined whether the destination is a previously authorized destination (second determination process, S206). Here, the destination information is information that the traffic control device 500 obtains and stores from the wireless Internet service provider or the mobile communication network operator in step S122 of FIG. 2.

As a result, when the destination of the temporarily stored traffic corresponds to a pre-authorized destination, the traffic is legitimate and thus allowed (S208). Otherwise, it is determined whether the temporarily stored traffic uses the VoIP standard protocol. (Third determination process, S210).

As a result, when it is determined that the VoIP standard protocol is used, since unauthorized traffic is obvious, it is blocked (S212), and when the traffic does not use the standard protocol, the traffic pattern is analyzed (S214). As a pattern analysis for preventing a case where traffic of a non-standard protocol that does not use a SIP port is not blocked without being properly authorized, it is determined whether the traffic is VoIP based traffic as a result of the pattern analysis (fourth determination) Process, S216).

As a result, if the traffic is VoIP-based traffic, block (S218), otherwise allow (S220).

On the other hand, the scope of the rights of the unauthorized traffic control method in a mobile communication network according to an embodiment of the present invention is apparent to those skilled in the art even in a computer-readable recording medium that records a program code for executing a method performed by a computer. Do.

Although embodiments of the present invention have been described above with reference to the accompanying drawings, those skilled in the art to which the present invention pertains may implement the present invention in other specific forms without changing the technical spirit or essential features thereof. I can understand that. Therefore, it should be understood that the embodiments described above are exemplary in all respects and not restrictive.

1 is a block diagram of an unauthorized traffic control system in a mobile communication network according to an embodiment of the present invention.

2 is a call flow diagram of an unauthorized traffic control method in a mobile communication network according to an embodiment of the present invention.

3 is a flowchart illustrating a process of determining unauthorized traffic blocking according to an embodiment of the present invention.

(Description of the main parts of the drawing)

110: mobile terminal 200: wireless access network

300: packet data node 400: traffic filtering device

500: traffic control device 510: first storage device

520: second storage device

Claims (16)

A traffic filtering device for temporarily storing Internet protocol (IP) based traffic transmitted through a mobile communication network and requesting whether the traffic is blocked; And And a traffic control device for determining whether the temporarily stored traffic is legitimately authorized traffic according to a predetermined criterion according to a request of the traffic filtering device. The traffic filtering device, And an unauthorized traffic control system in a mobile communication network according to a determination result of the traffic control apparatus. The method of claim 1, A first storage device interworking with the traffic control device using a Radius protocol and storing subscriber identification information; And And a second storage device interworking with the traffic control device using the Radius protocol and storing information of a subscriber terminal and information on whether the terminal is a subscriber to a wireless Internet service. Control system. The method of claim 2, The traffic control device, Acquire the subscriber identification information from the first storage device using the internet protocol address of the subscriber received from the traffic filtering device, and use the obtained subscriber identification information to obtain information of the subscriber station from the second storage device; Obtaining information on whether or not the terminal subscribes to the wireless Internet service, unauthorized traffic control system in a mobile communication network. The method of claim 2, The traffic control device, And obtaining destination information of the traffic authorized by the operator providing the wireless Internet service and the operator of the mobile communication network. The method of claim 1, The traffic control device, A first determining step of determining whether the temporarily stored traffic is generated by a terminal subscribed to a wireless Internet service, a second determining step of determining whether a destination of the temporarily stored traffic is a previously authorized destination, and the temporarily stored traffic And performing a third determination process of determining whether to use the standard protocol of the voice over internet protocol. The method of claim 5, wherein The traffic control device, In the case where the temporarily stored traffic is traffic that does not use the standard protocol, an unauthorized traffic control in a mobile communication network is performed by analyzing a pattern of the traffic and determining whether the traffic is based on the voice over internet protocol. system. The method of claim 5, wherein And the standard protocol is a session initiation protocol. The method of claim 5, wherein The traffic filtering device, As a result of performing the first determination process, the traffic generated by the terminal subscribed to the wireless Internet service, and as a result of performing the second determination process, is not the authorized destination; And if so, block the traffic. The method of claim 6, The traffic filtering device, And if the traffic is based on the voice over internet protocol as a result of performing the fourth determination process, block the traffic. Temporarily storing traffic based on an Internet Protocol (IP) transmitted through a mobile communication network; Determining whether the temporarily stored traffic is legitimately authorized traffic by a predetermined criterion; And And blocking the traffic according to the determination result. The method of claim 10, Before determining whether the legitimately authorized traffic, Obtaining subscriber identification information using the subscriber's Internet protocol address (IP address); Acquiring information on a terminal used by the subscriber and information on whether the subscriber subscribes to a wireless Internet service using the obtained subscriber identification information; And And obtaining destination information of the traffic authorized by the operator providing the wireless Internet service and the operator of the mobile communication network. The method of claim 10, Determining whether the traffic is properly authorized, A first determination step of determining whether the temporarily stored traffic is traffic generated by a terminal subscribed to a wireless Internet service; A second determining step of determining whether a destination of the temporarily stored traffic is a previously authorized destination; And And a third determining step of determining whether the temporarily stored traffic uses a standard protocol of the voice over internet protocol. The method of claim 12, Determining whether the traffic is properly authorized, If the temporarily stored traffic is traffic that does not use the standard protocol, further comprising a fourth determination step of analyzing the pattern of the traffic to determine whether the traffic is based on the voice over internet protocol. Control method. The method of claim 12, Blocking the traffic, The traffic generated by the terminal subscribing to the wireless Internet service as a result of performing the first determination step, and is not an authorized destination as a result of performing the second determination step; When not in use, the unauthorized traffic control method in a mobile communication network to block the traffic. The method of claim 13, Blocking the traffic, If the traffic is based on the voice over internet protocol as a result of performing the fourth determination step, blocking the traffic. A computer readable recording medium comprising program code executed by a computer to perform an unauthorized traffic control method in a mobile communication network, the method comprising: Temporarily storing traffic based on an Internet Protocol (IP) transmitted through a mobile communication network; Determining whether the temporarily stored traffic is legitimately authorized traffic by a predetermined criterion; And And blocking the traffic in accordance with the determination result.

Images