KR20100131612A - Mobile communication terminal, communication system, method of establishing vpn connection in mobile communication and method of establishing vpn connection in communication system - Google Patents

Abstract

PURPOSE: A mobile communication terminal, a communication system, method for setting VPN of the mobile communication terminal and a method for setting VPN of a communication system are provided to divide template information and connection information among VPN setting profiles, which respectively corresponds to a plurality fo VPN vendors and to use information, thereby reducing inconvenience of setting VPN. CONSTITUTION: A first server(300) is comprised of template information, a plurality of connection information, and at least one certificates. The first server transmits VPN(Virtual Private Network) setting information to a PC(200). A mobile communication terminal(100) or the PC receives VPN setting request about a first VPN gateway corresponding to a first VPN vendor. The PC transmits VPN setting information about the first VPN gateway to the mobile communication terminal. The mobile communication terminal performs VPN setting about the first VPN gateway.

Description

Mobile communication terminal, communication system, how to set up a WPN of a mobile communication terminal and a WP setting of a communication system {Mobile Communication Terminal, Communication System, Method Of Establishing VPN Connection in Mobile Communication And Method Of Establishing VPN Connection in Communication System}

The present invention relates to a mobile communication terminal and a communication system, and relates to a mobile communication terminal, a communication system, a VPN setting method of a mobile communication terminal and a VPN setting method of a communication system for easy and convenient VPN connection setting.

VPNs are largely divided into IPSec VPNs and SSL VPNs, and IPSec is used when security demands are strong. There are hundreds of IPSecs, depending on the VPN vendor that provides them.

However, in the conventional VPN configuration method, the contents and procedures are different and difficult according to each VPN vendor, so that it is very difficult for a general user to establish a VPN connection.

An object of the present invention is to provide a mobile communication terminal, a communication system, a VPN setting method for a mobile communication terminal and a VPN setting method for a communication system, which can easily and conveniently set a VPN connection in a mobile communication terminal and a communication system. .

According to a first aspect of the present invention, there is provided a VPN setting method of a mobile communication terminal. Receiving a VPN establishment request for a first VPN gateway; In response to the VPN configuration request, template information including data necessary for VPN configuration for VPN gateways corresponding to the plurality of VPN vendors, respectively, and VPN configuration for the first VPN gateway are configured. Receiving connection information including connection data including unique data necessary for the connection and VPN setting information including a certificate required for VPN setting for the first VPN gateway; And performing VPN setting for the first VPN gateway by using the received VPN setting information.

According to a second aspect of the present invention, there is provided a VPN setting method of a communication system, comprising: establishing a virtual private network (VPN) in a communication system including a mobile communication terminal and a first server connectable to the mobile communication terminal through a wireless Internet; The method of claim 1, further comprising: template information including, by the first server, data commonly required for VPN configuration for VPN gateways corresponding to each of a plurality of VPN vendors; Configuring a plurality of connection information each including unique data required for VPN configuration for each of the VPN gateways, and at least one certificate required for the VPN configuration; Receiving, by the mobile communication terminal, a VPN setting request for a first VPN gateway corresponding to a first VPN vendor among the plurality of VPN vendors; By the mobile communication terminal, the template information, connection information corresponding to the first VPN vendor among the plurality of connection information, and the first VPN gateway among the at least one certificate according to the VPN setting request; Receiving VPN setting information from the first server, the VPN setting information including a certificate required for the VPN setting for the server; And performing, by the mobile communication terminal, VPN setting for the first VPN gateway using the received VPN setting information.

A mobile communication terminal according to a third aspect of the present invention is a mobile communication terminal that provides a virtual private network (VPN) function, and includes a plurality of VPN gateways respectively corresponding to a plurality of VPN vendors. Template information including data commonly required for VPN configuration for the VPN, a plurality of connection information each including unique data required for VPN configuration for each of the plurality of VPN gateways, and VPN A first communication unit for communicating by wire or wirelessly with an external first terminal that stores at least one certificate required for setting; A second communication unit for communicating with a VPN gateway; And when a VPN setting request for a first VPN gateway corresponding to a first VPN vendor of the plurality of VPN vendors is received, the template information and a connection corresponding to the first VPN gateway among the plurality of connection information. Receiving VPN setting information including information and a certificate required for VPN setting for the first VPN gateway among the at least one certificate from the first terminal through the first communication unit, and receiving the received VPN setting information. And a control unit configured to perform VPN setting for the first VPN gateway through the second communication unit.

A communication system according to a fourth aspect of the present invention includes a mobile communication terminal providing a virtual private network (VPN) function and a first server connectable to the mobile communication terminal via a wireless Internet, the communication system comprising: The first server may include template information including data commonly required for VPN configuration for a plurality of VPN gateways corresponding to a plurality of VPN vendors, and the plurality of VPN gateways. A database that stores a plurality of connection information each including unique data required for VPN setup for each, and at least one certificate required for VPN setup; And a first communication unit for communicating with the mobile communication terminal, wherein the mobile communication terminal comprises: a second communication unit for communicating with the first server; A third communication unit for communicating with a VPN gateway; And when receiving a VPN setting request for a first VPN gateway corresponding to a first VPN vendor among the plurality of VPN vendors, the template information and a connection corresponding to the first VPN gateway among the plurality of connection information. Receiving VPN setting information including information and a certificate required for VPN setting for the first VPN gateway among the at least one certificate from the first server through the second communication unit, and receiving the received VPN setting information. And a controller configured to perform VPN setting for the first VPN gateway through the third communication unit.

According to a mobile communication terminal, a communication system, a VPN setting method of a mobile communication terminal and a VPN setting method of a communication system according to the present invention, there is an effect that a user can easily and conveniently set a VPN.

The above objects, features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. Like numbers refer to like elements throughout. In addition, when it is determined that the detailed description of the known function or configuration related to the present invention may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

Hereinafter, a mobile communication terminal according to the present invention will be described in more detail with reference to the accompanying drawings. The suffixes "module" and "unit" for components used in the following description are given or used in consideration of ease of specification, and do not have distinct meanings or roles from each other.

The mobile communication terminal described herein may include a mobile phone, a smart phone, a laptop computer, a digital broadcasting terminal, a personal digital assistant (PDA), a portable multimedia player (PMP), navigation, and the like.

1 and 2 schematically illustrate a communication system to which the present invention is applied. 1 is a detailed diagram of an environment in which an Internet Protocol Security protocol (IPSec) virtual private network (VPN) is constructed, and FIG. 2 is a schematic diagram of main entities of a VPN environment including a mobile communication terminal. 1 and 2, a communication system to which the present invention is applied will be described. However, since the VPN itself is a known technology, a detailed description thereof will be omitted as much as possible because it may unnecessarily obscure the technical idea of the present invention.

VPNs can be defined in a variety of ways. For example, a VPN is a data network configured for the purpose of an individual company by using tunneling protocols and security procedures using a public network infrastructure, and contrasts with a private network or a private line that can be used only by one company. to be. Alternatively, for example, a VPN may be defined as a virtual network having an effect like a leased line by using a network connected to a public network by using a tunneling technique.

Tunneling refers to a technique of separately exchanging VPN protocol information to a public network by encapsulating a network protocol in a transmitted packet.

Key technologies used to implement VPNs include tunneling, encryption / authentication, and access control technologies.

There are many different protocols for configuring a VPN. Representative VPN protocols include IPSec VPN and SSL VPN. In addition, even with the same IPSec VPN, the specification and negotiation method for VPN configuration may be different depending on the VPN vendor. It is clear that the present invention can be applied to all VPN protocols in principle regardless of the VPN protocol. Hereinafter, embodiments of the present invention will be described with reference to IPSec VPN.

VPNs can also be classified according to their configuration. For example, an intranet connecting the company's internal network and its branch offices with a VPN; An extranet connects investors with a VPN.

Intranet VPNs are semi-permanent private networks that are connected network-to-network. And a remote access VPN can be called a mobile user-to-LAN connection. Extranet VPNs are busineses-to-business VPNs that interconnect heterogeneous subnets with different security policies.

It is clear that the present invention can be applied to all VPN types in principle, regardless of the VPN type according to the above configuration. Hereinafter, embodiments of the present invention will be described based on a remote connection.

VPN configuration in this document means establishing a VPN connection.

The communication system to which the present invention is applied may include an internal network 10 and at least one external network 20 as shown in FIGS. 1 and 2.

The internal network 10 includes the internal server 300. Hereinafter, the internal server 300 will be referred to as a first server 300. A representative example of the internal network 10 is an intranet of a specific company.

As shown in FIG. 2, the first server 300 may include an email server, an authentication server, an application server, and the like. The first server 300 includes a database for storing VPN setting information to be described later, and includes a communication unit for communicating with the mobile communication terminal 100 and / or the personal computer 200 described later.

The external network 20 may include a wireless LAN (WLAN) and the Internet. The Internet includes both wired Internet and wireless Internet.

In addition, the communication system to which the present invention is applied may include a mobile communication terminal 100 and a personal computer 200.

As illustrated in FIG. 2, the mobile communication terminal 100 may communicate with the VPN gateway 30 through the mobile network 40. Examples of the mobile network 40 include GPRS, EGPRS, WCDMA, WLAN, and the like.

The mobile communication terminal 100 may communicate with the first server 300 via the mobile network 40 without using a VPN.

The personal computer 200 may be connected to the mobile communication terminal 100 in a wired or wireless manner, and may be connected to the first server 300 in a wired or wireless manner.

3 is a block diagram of a mobile communication terminal according to an embodiment of the present invention.

The mobile communication terminal 100 includes a wireless communication unit 110, an A / V input unit 120, a user input unit 130, a sensing unit 140, an output unit 150, and a memory unit 160. , An interface unit 170, a controller 180, and a power supply unit 190 may be included. Since the components shown in FIG. 3 are not essential, a mobile communication terminal having more or fewer components may be implemented.

Hereinafter, the components will be described in order.

The wireless communication unit 110 may include one or more modules that enable wireless communication between the mobile communication terminal 100 and a wireless communication system or between a mobile communication terminal 100 and a network in which the mobile communication terminal 100 is located. . For example, the wireless communication unit 110 may include a broadcast receiving module 111, a mobile communication module 112, a wireless Internet module 113, a short range communication module 114, and a location information module 115 .

The broadcast receiving module 111 receives a broadcast signal and / or broadcast related information from an external broadcast management server through a broadcast channel.

The broadcast channel may include a satellite channel and a terrestrial channel. The broadcast management server may mean a server that generates and transmits a broadcast signal and / or broadcast related information or a server that receives a previously generated broadcast signal and / or broadcast related information and transmits the same to a terminal. The broadcast signal may include not only a TV broadcast signal, a radio broadcast signal, and a data broadcast signal, but also a broadcast signal having a data broadcast signal combined with a TV broadcast signal or a radio broadcast signal.

The broadcast related information may mean information related to a broadcast channel, a broadcast program, or a broadcast service provider. The broadcast related information may also be provided through a mobile communication network. In this case, it may be received by the mobile communication module 112.

The broadcast related information may exist in various forms. For example, it may exist in the form of Electronic Program Guide (EPG) of Digital Multimedia Broadcasting (DMB) or Electronic Service Guide (ESG) of Digital Video Broadcast-Handheld (DVB-H).

The broadcast receiving module 111 receives a broadcast signal using various broadcasting systems, and in particular, digital multimedia broadcasting-terrestrial (DMB-T), digital multimedia broadcasting-satellite (DMB-S), and media forward link (MediaFLO). Digital broadcast signals can be received using digital broadcasting systems such as only), digital video broadcast-handheld (DVB-H), integrated services digital broadcast-terrestrial (ISDB-T), and the like. Of course, the broadcast receiving module 111 may be adapted to other broadcasting systems that provide broadcast signals as well as the digital broadcasting system described above.

The broadcast signal and / or broadcast related information received through the broadcast receiving module 111 may be stored in the memory unit 160.

The mobile communication module 112 transmits and receives a wireless signal with at least one of a base station, an external terminal, and a server on a mobile communication network. The wireless signal may include various types of data according to transmission and reception of a voice call signal, a video call call signal, or a text / multimedia message.

The wireless internet module 113 refers to a module for wireless internet access, and the wireless internet module 113 may be embedded or external to the mobile communication terminal 100. Wireless Internet technologies may include Wireless LAN (Wi-Fi), Wireless Broadband (Wibro), World Interoperability for Microwave Access (Wimax), High Speed Downlink Packet Access (HSDPA), and the like.

The short range communication module 114 refers to a module for short range communication. As a short range communication technology, Bluetooth, Radio Frequency Identification (RFID), Infrared Data Association (IrDA), Ultra Wideband (UWB), ZigBee, and the like may be used.

The location information module 115 is a module for checking or obtaining the location of the mobile communication terminal. The location information module 115 may obtain location information using a global navigation satellite system (GNSS). Here, the Global Positioning System (GNSS) is a term used to describe the radionavigation satellite systems in which certain types of radionavigation receivers orbiting the Earth are transmitting reference signals that can determine their position near the surface or ground surface . The Global Positioning System (GNSS) includes Global Positioning System (GPS) in the United States, Galileo in Europe, GLONASS (Global Orbiting Navigational Satelite System) in Russia, COMPASS in China and Japan QZSS (Quasi-Zenith Satellite System), which is operated by the Ministry of Land, Infrastructure and Transport.

As a representative example of the GNSS, the location information module 115 may be a Global Position System (GPS) module. The GPS module calculates information on a distance (distance) from three or more satellites to a point (object), information on a time when the distance information is measured, and then applies a trigonometric method to the calculated distance information, Dimensional position information according to latitude, longitude, and altitude with respect to a point (object) in the three-dimensional space. Furthermore, a method of calculating position and time information using three satellites and correcting the error of the calculated position and time information using another satellite is also used. The GPS module continuously calculates the current position in real time, and calculates velocity information using the current position.

Referring to FIG. 3, the A / V input unit 120 is for inputting an audio signal or a video signal, and may include a camera 121 and a microphone 122. The camera 121 processes image frames such as still images or moving images obtained by the image sensor in the video call mode or the photographing mode. The processed image frame may be displayed on the display unit 151.

The image frame processed by the camera 121 may be stored in the memory unit 160 or transmitted to the outside through the wireless communication unit 110. The camera 121 may be equipped with two or more cameras according to the configuration of the terminal.

The microphone 122 receives an external sound signal by a microphone in a call mode, a recording mode, a voice recognition mode, etc., and processes the external sound signal into electrical voice data. The processed voice data can be converted into a form that can be transmitted to the mobile communication base station through the mobile communication module 112 when the voice data is in the call mode, and output. The microphone 122 may implement various noise removing algorithms for removing noise generated in the process of receiving an external sound signal.

The user input unit 130 generates input data for the user to control the operation of the terminal. The user input unit 130 may include a key pad dome switch, a touch pad (static pressure / capacitance), a jog wheel, a jog switch, and the like.

The sensing unit 140 is a mobile communication terminal 100 such as an open / closed state of the mobile communication terminal 100, a location of the mobile communication terminal 100, a presence or absence of a user contact, a bearing of the mobile communication terminal, and an acceleration / deceleration of the mobile communication terminal. Detects the current state of the mobile terminal and generates a sensing signal for controlling the operation of the mobile communication terminal 100. For example, when the mobile communication terminal 100 is in the form of a slide phone, it may sense whether the slide phone is opened or closed. In addition, it may be responsible for sensing functions related to whether the power supply unit 190 is supplied with power, whether the interface unit 170 is coupled to an external device, and the like. The sensing unit 140 may include a proximity sensor 141.

The output unit 150 is used to generate an output related to visual, auditory, or tactile, and may include a display unit 151, an audio output module 152, an alarm unit 153, and a haptic module 154. have.

The display unit 151 displays and outputs information processed by the mobile communication terminal 100. For example, when the mobile communication terminal is in a call mode, a user interface (UI) or a graphic user interface (GUI) related to a call is displayed. When the mobile communication terminal 100 is in a video call mode or a shooting mode, the mobile terminal 100 displays a captured image and / or a received image, UI, or GUI.

The display unit 151 may be a liquid crystal display, a thin film transistor-liquid crystal display, an organic light-emitting diode, a flexible display, a three-dimensional display 3D display).

Some of these displays can be configured to be transparent or light transmissive so that they can be seen from the outside. This may be referred to as a transparent display. A representative example of the transparent display is a transparent LCD. The rear structure of the display unit 151 may also be configured as a light transmissive structure. By this structure, the user can see the object located behind the terminal body through the area occupied by the display unit 151 of the terminal body.

There may be two or more display units 151 according to the implementation form of the mobile communication terminal 100. For example, a plurality of display units may be spaced apart or integrally disposed on one surface of the mobile communication terminal 100, or may be disposed on different surfaces.

When the display unit 151 and a sensor for detecting a touch operation (hereinafter, referred to as a touch sensor) form a mutual layer structure (hereinafter, abbreviated as “touch screen”), the display unit 151 is an output device. It can also be used as an input device. The touch sensor may have, for example, a form of a touch film, a touch sheet, a touch pad, or the like.

The touch sensor may be configured to convert a change in pressure applied to a specific portion of the display unit 151 or capacitance generated in a specific portion of the display unit 151 into an electrical input signal. The touch sensor may be configured to detect not only the position and area of the touch but also the pressure at the touch.

If there is a touch input to the touch sensor, the corresponding signal (s) is sent to the touch controller. The touch controller processes the signal (s) and then transmits the corresponding data to the controller 180. As a result, the controller 180 can know which area of the display unit 151 is touched.

Referring to FIG. 3, the proximity sensor 141 may be disposed in an inner region of the mobile communication terminal or surrounded by the touch screen. The proximity sensor refers to a sensor that detects the presence or absence of an object approaching a predetermined detection surface or an object present in the vicinity without using a mechanical contact by using an electromagnetic force or infrared rays. Proximity sensors have a longer life and higher utilization than touch sensors.

Examples of the proximity sensor include a transmission photoelectric sensor, a direct reflection photoelectric sensor, a mirror reflection photoelectric sensor, a high frequency oscillation proximity sensor, a capacitive proximity sensor, a magnetic proximity sensor, and an infrared proximity sensor.

When the touch screen is capacitive, the touch screen is configured to detect the proximity of the pointer by the change of the electric field according to the proximity of the pointer. In this case, the touch screen (touch sensor) may be classified as a proximity sensor.

Hereinafter, for convenience of explanation, the act of allowing the pointer to be recognized without being in contact with the touch screen so that the pointer is located on the touch screen is referred to as a "proximity touch", and the touch The act of actually touching the pointer on the screen is called "contact touch." The position where the proximity touch is performed by the pointer on the touch screen refers to a position where the pointer is perpendicular to the touch screen when the pointer is in proximity proximity.

The proximity sensor detects a proximity touch and a proximity touch pattern (e.g., a proximity touch distance, a proximity touch direction, a proximity touch speed, a proximity touch time, a proximity touch position, a proximity touch movement state, and the like). Information corresponding to the sensed proximity touch operation and proximity touch pattern may be output on the touch screen.

The sound output module 152 may output audio data received from the wireless communication unit 110 or stored in the memory unit 160 in a call signal reception, a call mode or a recording mode, a voice recognition mode, a broadcast reception mode, and the like. The sound output module 152 outputs a sound signal related to a function (for example, a call signal reception sound and a message reception sound) performed in the mobile communication terminal 100. The sound output module 152 may include a receiver, a speaker, a buzzer, and the like. In addition, the sound output module 152 may output sound through the earphone jack 116. The user can connect the earphone to the earphone jack 116 to hear the sound output.

The alarm unit 153 outputs a signal for notifying occurrence of an event of the mobile communication terminal 100. Examples of events occurring in the mobile communication terminal include call signal reception, message reception, key signal input, and touch input. The alarm unit 153 may output a signal for notifying occurrence of an event in a form other than a video signal or an audio signal, for example, vibration. The video signal or the audio signal may also be output through the display unit 151 or the sound output module 152.

The haptic module 154 generates various tactile effects that the user can feel. Vibration is a representative example of the haptic effect generated by the haptic module 154. The intensity and pattern of vibration generated by the haptic module 154 can be controlled. For example, different vibrations may be synthesized and output or may be sequentially output.

In addition to the vibration, the haptic module 154 may be used for the effects of stimulation by the arrangement of pins vertically moving with respect to the contact skin surface, the effect of the injection force of the air through the injection or inlet or the stimulation through the suction force, and the stimulation that rubs the skin surface. Various tactile effects can be generated, such as effects caused by stimulation through contact of electrodes, effects by stimulation using electrostatic force, and effects of reproducing a sense of warmth and heat using an endothermic or heat generating element.

The haptic module 154 may not only deliver the haptic effect through direct contact, but also implement the haptic effect through the muscle sense of the user's finger or arm. Two or more haptic modules 154 may be provided according to a configuration aspect of the mobile terminal 100.

The memory unit 160 may store a program for the operation of the controller 180 and may temporarily store input / output data (for example, a phone book, a message, a still image, a video, etc.). The memory unit 160 may store data regarding vibration and sound of various patterns output when a touch input on the touch screen is performed.

The memory unit 160 may include a flash memory type, a hard disk type, a multimedia card micro type, a card type memory (for example, SD or XD memory), Random Access Memory (RAM), Static Random Access Memory (SRAM), Read-Only Memory (ROM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Programmable Read-Only Memory (PROM) Magnetic Memory, Magnetic It may include a storage medium of at least one type of disk, optical disk. The mobile communication terminal 100 may operate in association with a web storage that performs a storage function of the memory unit 160 on the Internet.

The interface unit 170 serves as a path with all external devices connected to the mobile communication terminal 100. The interface unit 170 receives data from an external device or receives power and transmits the data to each component in the mobile communication terminal 100 or transmits data in the mobile communication terminal 100 to an external device. For example, a wired / wireless headset port, an external charger port, a wired / wireless data port, a memory card port, a port for connecting a device having an identification module, an audio I / O port, A video input / output (I / O) port, an earphone port, and the like may be included in the interface unit 170.

The identification module is a chip that stores various types of information for authenticating the use authority of the mobile communication terminal 100. The identification module includes a user identification module (UIM), a subscriber identification module (SIM), and a universal user authentication module. (Universal Subscriber Identity Module, USIM) and the like. Devices with identification modules (hereinafter referred to as "identification devices") can be manufactured in a smart card format. Therefore, the identification device may be connected to the terminal 100 through a port.

When the mobile communication terminal 100 is connected to an external cradle, the interface unit may be a passage through which power from the cradle is supplied to the mobile communication terminal 100, or various command signals input from the cradle by a user may be used. It may be a passage that is delivered to the mobile communication terminal. Various command signals or power input from the cradle may operate as signals for recognizing that the mobile communication terminal is correctly mounted on the cradle.

The controller 180 typically controls the overall operation of the mobile communication terminal. For example, it performs related control and processing for voice call, data communication, video call and so on. The controller 180 may include a multimedia module 181 for playing multimedia. The multimedia module 181 may be implemented in the controller 180 or may be implemented separately from the controller 180.

The controller 180 may perform a pattern recognition process for recognizing a writing input or a drawing input performed on the touch screen as text and an image, respectively.

The power supply unit 190 receives an external power source and an internal power source under the control of the controller 180 to supply power for operation of each component.

Various embodiments described herein may be implemented in a recording medium readable by a computer or similar device using, for example, software, hardware or a combination thereof.

According to a hardware implementation, embodiments described herein include application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), and the like. It may be implemented using at least one of processors, controllers, micro-controllers, microprocessors, and electrical units for performing the functions. It may be implemented by the controller 180.

In a software implementation, embodiments such as procedures or functions may be implemented with separate software modules that allow at least one function or operation to be performed. The software code may be implemented by a software application written in a suitable programming language. Also, the software codes may be stored in the memory unit 160 and executed by the control unit 180. [

4 is a diagram illustrating examples of some screens required for VPN setup according to the prior art. As mentioned in the background of this document, the VPN setting method according to the prior art, as shown in Figure 4, the inconvenience of having to enter data in a very large field through a user interface having a very complex screen configuration Following, the VPN setup itself is very difficult. Therefore, the general user cannot easily perform a preset operation for using the VPN function even if the mobile terminal is provided with a VPN function.

5 is a schematic diagram illustrating a VPN setting method according to embodiments of the present invention to be described below. According to the embodiments described below, as shown in FIG. 5, the VPN setting information 50 is distributed from the first server 300 to the personal computer 200 [S10], or the personal computer 200. ) May be distributed to the mobile communication terminal 100 [S11], or from the first server 300 to the mobile communication terminal 100 [S12].

The VPN configuration information 50 may include template information, connection information, and a certificate as described below.

6 is a flowchart illustrating a VPN setting method of a mobile communication terminal and a communication system according to a first embodiment of the present invention. The VPN setting method of the mobile communication terminal and the communication system according to the first embodiment of the present invention may be implemented in the communication system and the mobile communication terminal 100 described above with reference to FIGS. With reference to FIG. 6 and necessary drawings, a method for setting a VPN of a mobile communication terminal and a communication system according to a first embodiment of the present invention will be described in detail.

The first server 300 includes template information including data commonly required for VPN configuration for a plurality of VPN gateways corresponding to a plurality of VPN vendors, and each of the plurality of VPN gateways. A plurality of connection information, each of which contains the unique data required for the VPN setting for the configuration and at least one certificate required for the VPN configuration is configured [S100].

Representative examples of the plurality of VPN vendors include "Juniper", "Cisco", "Checkpoint", and the like.

The first server 300 may include a database that stores the template information, the plurality of connection information, and the at least one certificate.

FIG. 7 is a diagram showing an example of the template information, and FIGS. 8A and 8B are diagrams showing examples of the connection information. FIG. 8A shows an example of connection information for "cisco" as a VPN vendor, and FIG. 8B shows an example of connection information for "juniper" as a VPN vendor.

That is, the first server 300, for a plurality of VPN vendors having different specifications and different negotiation methods, the data extracted in common among the data or profiles required for VPN configuration are extracted. The template information may be configured, and different data among the data required for the VPN setting may be configured and stored as connection information.

The first server 300 transmits VPN setting information including the template information, the plurality of connection information and the at least one certificate, to the personal computer 200 [S110].

The first server 300 transmits only the template information to the personal computer 200, and when there is a request for transmission from the personal computer 200, at least one connection information of the plurality of connection information and The at least one certificate may be transmitted to the personal computer 200.

Alternatively, the first server 300 transmits the template information and the at least one certificate to the personal computer 200 and, when there is a request for transmission from the personal computer 200, the plurality of connection information. At least one of the connection information may be transmitted to the personal computer 200.

The personal computer 200 may store VPN setting information transmitted from the first server 300 in a memory.

The mobile communication terminal 100 or the personal computer 200 may receive a VPN setting request for a first VPN gateway corresponding to a first VPN vendor among the plurality of VPN vendors [S120].

The VPN setting request may be received through the user input unit 130 provided in the mobile communication terminal 100 or the user input unit provided in the personal computer 200.

9 is a diagram illustrating an example of a graphical user interface (GUI) that may be provided in a communication system according to an embodiment of the present invention.

Referring to FIG. 9, the first graphical user interface 60 shows an example of a graphical user interface for receiving the VPN setting request.

In step S120, when the personal computer 200 receives the VPN setting request, the personal computer 200 transmits the VPN setting information for the first VPN gateway among the stored VPN setting information to the mobile communication terminal ( 100) [S140].

The VPN setting information for the first VPN gateway may include the template information, first connection information corresponding to the first VPN gateway among the plurality of connection information, and the first VPN gateway among the at least one certificate. It can contain the certificates needed to set up the VPN for the server.

That is, the template information relates to data that can be commonly used for VPN setting for VPN gateways corresponding to the plurality of VPN vendors. The first connection information relates to unique data independently required for VPN setting for the first VPN gateway among VPN gateways corresponding to the plurality of VPN vendors.

In step S120, when the mobile communication terminal 100 receives the VPN setting request, the mobile communication terminal 100 may request the personal computer 200 for VPN setting information for the first VPN gateway. [S130]. However, even when the mobile communication terminal 100 receives the VPN setting request, the step S130 may be omitted.

The personal computer 200 according to the request transmitted from the mobile communication terminal 100, or independently, the personal computer 200 stores the VPN setting information for the first VPN gateway among the stored VPN setting information. 100) [S140].

The mobile communication terminal 100 performs VPN setting for the first VPN gateway using the VPN setting information for the first VPN gateway transmitted from the personal computer 200 [S150].

Here, the step S150 may be set to be performed when a command to perform the VPN setting is received through the second graphic user interface provided to the display unit 151 of the mobile communication terminal 100. For example, referring to FIG. 9, a user may use a "connect" icon for instructing to perform a VPN setting for the first VPN gateway through the second graphic user interface 70 provided to the mobile communication terminal 100. Softkeys can be selected.

10 is a flowchart illustrating a VPN setting method of a mobile communication terminal and a communication system according to a second embodiment of the present invention. The VPN setting method of the mobile communication terminal and the communication system according to the second embodiment of the present invention may be implemented in the communication system and the mobile communication terminal 100 described above with reference to FIGS. With reference to FIG. 10 and necessary drawings, a method for setting a VPN of a mobile communication terminal and a communication system according to a second embodiment of the present invention will be described in detail.

The first server 300 includes template information including data commonly required for VPN configuration for a plurality of VPN gateways corresponding to a plurality of VPN vendors, and each of the plurality of VPN gateways. A plurality of connection information, each containing the unique data required for the VPN setting for the configuration of at least one certificate required for the VPN configuration is configured [S200]. Since step S200 corresponds to step S100 in the above-described first embodiment of the present invention, a detailed description thereof will be omitted.

The mobile communication terminal 100 may receive a VPN setting request for a first VPN gateway corresponding to a first VPN vendor among the plurality of VPN vendors [S210]. The VPN setting request may be received through the user input unit 130 provided in the mobile communication terminal 100. Here, the mobile communication terminal 100 may provide the display unit 151 with the first graphic user interface 60 shown in FIG. 9.

The mobile communication terminal 100 may request the first server 300 for VPN setting information necessary for VPN setting for the first VPN gateway [S220].

The first server 300 may transmit, to the mobile communication terminal 100, VPN setting information necessary for VPN setting for the first VPN gateway according to the request made in step S220 [S230]. .

In this case, step S220 may be omitted. When the step S220 is omitted, the first server 300 may independently transmit VPN setting information necessary for VPN setting for the first VPN gateway to the mobile communication terminal 100 [S230].

The VPN setting information for the first VPN gateway may include the template information, first connection information corresponding to the first VPN gateway among the plurality of connection information, and the first VPN gateway among the at least one certificate. It can contain the certificates needed to set up the VPN for the server.

The mobile communication terminal 100 performs VPN setting for the first VPN gateway by using the VPN setting information for the first VPN gateway transmitted from the first server 300 [S240]. Since step S240 corresponds to step S150 in the above-described first embodiment of the present invention, a detailed description thereof will be omitted.

11 is a flowchart illustrating a VPN setting method of a mobile communication terminal and a communication system according to a third embodiment of the present invention. The VPN setting method of the mobile communication terminal and the communication system according to the third embodiment of the present invention may be implemented in the communication system and the mobile communication terminal 100 described above with reference to FIGS. 1 to 3. With reference to FIG. 11 and necessary drawings, a VPN setting method of a mobile communication terminal and a communication system according to a third embodiment of the present invention will be described in detail.

The first server 300 includes template information including data commonly required for VPN configuration for a plurality of VPN gateways corresponding to a plurality of VPN vendors, and each of the plurality of VPN gateways. A plurality of connection information, each containing the unique data required for the VPN configuration for the configuration of at least one certificate necessary for the VPN configuration is configured [S300]. Since step S200 corresponds to step S100 in the above-described first embodiment of the present invention, a detailed description thereof will be omitted.

The first server 300 transmits the template information, the plurality of connection information, and the at least one certificate to the mobile communication terminal 100 [S310].

Each time the first server 300 updates the template information, at least one of the plurality of connection information and the at least one certificate, the first server 300 transmits the updated information to the mobile communication terminal 100. Can be sent to.

Alternatively, operation S310 and / or transmission of the updated information may be performed at the request of the mobile communication terminal 100.

The mobile communication terminal 100 may store the VPN setting information transmitted from the first server 300 in the memory 160.

The mobile communication terminal 100 may receive a VPN setting request for a first VPN gateway corresponding to a first VPN vendor among the plurality of VPN vendors [S320]. Step S320 may correspond to step S210 in the above-described second embodiment of the present invention.

The mobile communication terminal 100 searches for information necessary for VPN setting for the first VPN gateway from the VPN setting information stored in the memory 160.

As described above, the VPN setting information for the first VPN gateway may include the template information, first connection information corresponding to the first VPN gateway among the plurality of connection information, and the at least one certificate. It may include a certificate required for VPN setting for the first VPN gateway.

The mobile communication terminal 100 performs a VPN setting for the first VPN gateway using the found VPN setting information for the first VPN gateway [S330]. Since step S330 corresponds to step S150 in the above-described first embodiment of the present invention and step S240 in the above-described second embodiment of the present invention, a detailed description thereof will be omitted.

In the above-described embodiments, there may be a case in which the user needs to input an ID and / or a password for VPN setting through the mobile communication terminal 100 or the personal computer 200.

According to the VPN setting method according to the related art, since a plurality of VPN clients corresponding to a plurality of VPN vendors must be installed in the mobile communication terminal 100, memory is wasted and user inconvenience is increased. .

However, according to the above-described embodiments, by separating and using a common part (the template information) and a different part (the connection information) among VPN configuration profiles corresponding to a plurality of VPN vendors, respectively, The inconvenience caused by the VPN setup method can be eliminated at source.

In addition, according to the above-described embodiments, the mobile communication terminal 100 can easily connect to VPN gateways of a plurality of VPN vendors with only one VPN client.

The VPN setting method of the mobile communication terminal and the VPN setting method of the communication system according to the present invention described above may be provided by recording on a computer-readable recording medium as a program for executing in a computer.

The VPN setting method of the mobile communication terminal and the VPN setting method of the communication system according to the present invention can be executed through software. When implemented in software, the constituent means of the present invention are code segments that perform the necessary work. The program or code segments may be stored on a processor readable medium or transmitted by a computer data signal coupled with a carrier on a transmission medium or network.

Computer-readable recording media include all kinds of recording devices that store data that can be read by a computer system. Examples of the computer-readable recording device include ROM, RAM, CD-ROM, DVD ± ROM, DVD-RAM, magnetic tape, floppy disk, hard disk, optical data storage device, and the like. The computer readable recording medium can also be distributed over network coupled computer devices so that the computer readable code is stored and executed in a distributed fashion.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings. In addition, the embodiments described in this document may not be limitedly applied, but may be configured by selectively combining all or part of the embodiments so that various modifications may be made.

1 and 2 schematically illustrate a communication system to which the present invention is applied.

3 is a block diagram of a mobile communication terminal according to an embodiment of the present invention.

4 is a diagram illustrating examples of some screens required for VPN setup according to the prior art.

5 is a schematic diagram illustrating a VPN setting method according to embodiments of the present invention to be described below.

6 is a flowchart illustrating a VPN setting method of a mobile communication terminal and a communication system according to a first embodiment of the present invention.

7 is a diagram illustrating an example of the template information.

8A and 8B are diagrams showing examples of the connection information.

9 is a diagram illustrating an example of a graphical user interface (GUI) that may be provided in a communication system according to an embodiment of the present invention.

10 is a flowchart illustrating a VPN setting method of a mobile communication terminal and a communication system according to a second embodiment of the present invention.

11 is a flowchart illustrating a VPN setting method of a mobile communication terminal and a communication system according to a third embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

10: internal network 20: external network

30: VPN gateway 40: mobile network

50: VPN setting information 100: mobile communication terminal

200: personal computer 300: internal server (first server)

Claims (18)

In the method for setting up a virtual private network (VPN) in a mobile communication terminal, Receiving a VPN setup request for a first VPN gateway corresponding to a first VPN vendor among a plurality of VPN vendors; In response to the VPN configuration request, template information including data necessary for VPN configuration for VPN gateways corresponding to the plurality of VPN vendors, respectively, and VPN configuration for the first VPN gateway are configured. Receiving connection information including connection data including unique data necessary for the connection and VPN setting information including a certificate required for VPN setting for the first VPN gateway; And Performing VPN setting for the first VPN gateway using the received VPN setting information; VPN setting method of a mobile communication terminal comprising. The method of claim 1, wherein receiving the VPN setting request comprises: Receiving the VPN setting request through a user input unit provided in the mobile communication terminal, and receiving the VPN setting request through an external first terminal connected to the mobile communication terminal in a wired or wireless manner. VPN setting method of a mobile communication terminal comprising one. The method of claim 1, wherein receiving the VPN setting information comprises: And receiving the VPN setting information through an external first terminal storing the VPN setting information. The method of claim 3, wherein the first terminal, And a personal computer that can be connected to the mobile communication terminal by wire or wirelessly, or a first server that can be connected to the mobile communication terminal by wireless internet. The method of claim 4, wherein the VPN, VPN setting method of the mobile communication terminal, characterized in that for remote access (remote access) to the first server. The method of claim 1, wherein performing the VPN setting comprises: And when the command to perform the VPN setting is received through a graphical user interface (GUI) provided to the mobile communication terminal, performing the VPN setting. The method of claim 1, wherein the VPN, VPN setting method of a mobile communication terminal, characterized in that based on IPsec (Internet Protocol Security protocol). In a communication system comprising a mobile communication terminal and a first server connectable to the mobile communication terminal via the wireless Internet, the method of setting up a virtual private network (VPN), Template information including data commonly required for VPN configuration for VPN gateways corresponding to each of a plurality of VPN vendors by the first server, and each of the VPN gateways. Configuring a plurality of connection information each including unique data necessary for establishing a VPN for the at least one certificate, and at least one certificate required for establishing the VPN; Receiving, by the mobile communication terminal, a VPN setting request for a first VPN gateway corresponding to a first VPN vendor among the plurality of VPN vendors; By the mobile communication terminal, the template information, connection information corresponding to the first VPN vendor among the plurality of connection information, and the first VPN gateway among the at least one certificate according to the VPN setting request; Receiving VPN setting information from the first server, the VPN setting information including a certificate required for the VPN setting for the server; And In the mobile communication terminal, performing VPN setting for the first VPN gateway using the received VPN setting information; VPN setup method for a communication system that includes. The method of claim 8, wherein the VPN, Based on IPsec (Internet Protocol Security protocol), the VPN setting method for a communication system, characterized in that for remote access (remote access) to the first server. In the mobile communication terminal providing a VPN (virtual private network) function, Template information including data necessary for VPN configuration for a plurality of VPN gateways corresponding to a plurality of VPN vendors, respectively, and VPN for each of the plurality of VPN gateways. A first connection for wired or wireless communication with a plurality of connection information each including unique data required for configuration and an external first terminal storing at least one certificate required for VPN configuration Communication unit; A second communication unit for communicating with a VPN gateway; And When receiving a VPN setting request for a first VPN gateway corresponding to a first VPN vendor among the plurality of VPN vendors, the template information and connection information corresponding to the first VPN gateway among the plurality of connection information. And receiving VPN setting information from the first terminal through the first communication unit, the VPN setting information including a certificate required for VPN setting for the first VPN gateway among the at least one certificate, and receiving the received VPN setting information. A controller configured to perform VPN setting for the first VPN gateway through the second communication unit Mobile communication terminal comprising. The method of claim 10, wherein the control unit, And receiving the VPN setting request through a user input unit provided in the mobile communication terminal, or receiving the VPN setting request through the first terminal. The method of claim 10, wherein the first terminal, And a personal computer capable of connecting the mobile communication terminal with a wired or wireless connection, or a first server capable of connecting the mobile communication terminal with a wireless internet. The method of claim 12, wherein the VPN is Mobile communication terminal for remote access to the first server. The method of claim 10, wherein the control unit, And providing a graphical user interface (GUI) to the mobile communication terminal and performing the VPN setting when receiving a command to perform the VPN setting through the GUI. The method of claim 10, wherein the VPN, A mobile communication terminal, based on IPsec (Internet Protocol Security protocol). A communication system including a mobile communication terminal providing a virtual private network (VPN) function and a first server connectable to the mobile communication terminal via wireless internet, The first server, Template information including data necessary for VPN configuration for a plurality of VPN gateways corresponding to a plurality of VPN vendors, respectively, and VPN for each of the plurality of VPN gateways. A database that stores a plurality of connection information each including unique data required for configuration, and at least one certificate required for VPN configuration; And A first communication unit for communicating with the mobile communication terminal, The mobile communication terminal, A second communication unit for communicating with the first server; A third communication unit for communicating with a VPN gateway; And When receiving a VPN setting request for a first VPN gateway corresponding to a first VPN vendor among the plurality of VPN vendors, the template information and connection information corresponding to the first VPN gateway among the plurality of connection information. And receiving VPN setting information from the first server through the second communication unit, the VPN setting information including a certificate required for VPN setting for the first VPN gateway among the at least one certificate, and using the received VPN setting information. A controller configured to perform VPN setting for the first VPN gateway through the third communication unit Including a communication system. The method of claim 16, wherein the VPN setup request, And a first user input unit provided in the first terminal or a second user input unit provided in the mobile communication terminal. The method of claim 16, wherein the VPN, A communication system based on IPsec (Internet Protocol Security protocol), for remote access to said first server.

Images