KR20110106699A - System and method for controlling connection of internet by means of mobile communication terminal that has wireless lan access point funtion, and apparatus applied to the same - Google Patents

Abstract

The present invention discloses a system and method for controlling access to the Internet through a mobile communication terminal having a WLAN access point function, and an apparatus applied thereto. Internet access control system through a mobile communication terminal device having a wireless LAN access point function according to the present invention, not only to implement the mobile communication terminal device to operate as a wireless LAN access point, the Internet via a wireless LAN in the mobile communication terminal device It is configured to control the access to block the unauthorized wireless LAN terminal device or the application service of the unauthorized Internet. Accordingly, the present invention can increase the data usage using the mobile communication network associated with the wireless LAN, and the rapid load increase in the mobile communication network by blocking the generation of data traffic not authorized by the user or service provider of the mobile communication terminal device. Can be prevented.

Description

SYSTEM AND METHOD FOR CONTROLLING CONNECTION OF INTERNET BY MEANS OF MOBILE COMMUNICATION TERMINAL THAT HAS WIRELESS LAN ACCESS POINT FUNTION, AND APPARATUS APPLIED TO THE SAME}

The present invention relates to a system and method for controlling access to the Internet through a mobile communication terminal device having a wireless access point function, and an apparatus applied thereto. More specifically, the mobile communication terminal device can be implemented to operate as a wireless access point. In addition, the Internet through a mobile communication terminal device having a wireless LAN access point function for controlling an Internet access through a wireless LAN from the mobile communication terminal device to block an unauthorized wireless LAN device or an application service of the unauthorized Internet. A connection control system and method, and apparatus applied thereto.

Due to the generalization of Internet service and the development of wireless communication technology and digital technology, the increase of digital devices equipped with communication functions is being made rapidly.

As mobile communication terminal devices, which have been mainly used for voice or text message services, have evolved into smartphones, they can easily handle personal schedules and various tasks through mobile communication networks, mobile WiMax, and public wireless LANs. Environment was created.

In particular, the development of wireless LAN technology and the spread of application to personal mobile devices have been a great opportunity to increase the user's interest in the wireless Internet service.

The miniaturization, low power, and high speed of the wireless LAN chipset have provided the environment to use the wireless Internet in various portable terminal devices, and the spread of installation of wired / wireless routers and access points for private and public wireless LAN services is more convenient for users. Enabled the use of.

Increasing market needs for more open and free wireless Internet access and app store service premise based on sideloading are increasing the acceptance of wireless LANs by carriers. It is expected to increase.

However, despite the expansion of various external needs, due to the narrow service coverage of the WLAN, only hotspot-oriented services can be provided.

As a way to overcome this, carriers and manufacturers are releasing portable mobile router devices that link mobile networks and wireless LANs. The portable mobile router replaces the high-speed Internet used as a backhaul in the existing WLAN access pointer with 3G or WiMax network, and transfers Internet access request and data transmission from several wireless LAN terminal devices through the 3G network. It will play the role of connecting.

However, the WLAN service has a disadvantage in that a separate device must be carried and a separate service subscription is required for this.

In addition, even when a mobile communication network and a wireless LAN are linked, a method for blocking access to an unauthorized WLAN device or an unauthorized application service is not provided. There is a limit.

There is a need for a solution.

Accordingly, the present invention has been made to solve the above problems, and an object of the present invention is not only to implement the mobile communication terminal device to operate as a wireless LAN access point, but also to control the Internet access through the wireless LAN in the mobile communication terminal device. To provide a system and method for controlling an Internet access through a mobile communication terminal having a wireless access point function for blocking an unauthorized wireless LAN terminal device or an application service of an unlicensed Internet, and a device applied thereto. There is.

In addition, another object of the present invention is to block the unauthorized wireless LAN terminal device or the application service of the unauthorized Internet from the point of view of the user of the mobile communication terminal device, and the unauthorized wireless LAN terminal device or non The present invention provides a system and method for controlling an Internet access through a mobile communication terminal device having a function of a wireless LAN access point for blocking an application service of an authorized internet, and an apparatus applied thereto.

In order to achieve the above object, an Internet access control system through a mobile communication terminal apparatus having a WLAN access point function according to the first aspect of the present invention includes at least one WLAN terminal apparatus having a WLAN and the WLAN. In response to the access request of the wireless LAN terminal device through the Internet connection based on the mobile communication network to act as a wireless LAN access point, by reading the wireless LAN access information of the wireless LAN terminal device to allow access to the Internet It characterized in that it comprises a mobile communication terminal device for determining whether or not.

In addition, a mobile communication terminal apparatus according to a second aspect of the present invention for achieving the above object, a wireless LAN modem unit for accessing a wireless LAN access point or accepting a connection request of the wireless LAN terminal device, the wireless LAN access point A multi-connection controller for controlling a wireless LAN connection through the wireless LAN modem to perform a client function for accessing the wireless LAN terminal or to perform a connection request of the wireless LAN terminal device. Or a mobile communication modem unit for transmitting / receiving data, a connection controller for transmitting data transmitted and received between the wireless LAN modem unit and the mobile communication modem unit, allowing a user to access an Internet access to an unauthorized WLAN terminal device and an unauthorized application service. Application unit and the wireless LAN terminal for setting the configuration to block the It reads the value WiFi access information, characterized by a controller for determining whether to allow access to the Internet.

Preferably, the mobile communication terminal device further comprises a display / input unit for receiving a user input corresponding to the configuration.

Preferably, the mobile communication terminal device further comprises a Bluetooth modem unit for connecting with the Bluetooth terminal device.

Preferably, the mobile communication terminal device further comprises a memory unit for storing the setting information for the environment setting.

Preferably, the WLAN access information includes a Media Access Control (MAC) address of the WLAN terminal apparatus.

Preferably, when access to the Internet is permitted for the WLAN terminal device, the controller reads a port number of an application service for the Internet requested from the WLAN device and accesses the application service. It is characterized by determining whether to allow.

Preferably, when operating as the WLAN access point, the multiple access controller is characterized in that the configuration, allocation and management of a private IP address for operating as the WLAN access point.

Preferably, the access control unit transfers data received from the wireless LAN modem unit to the mobile communication modem unit, or traffic received from the mobile communication modem unit to a corresponding interface among a plurality of interfaces including the wireless modem unit. Distribute and deliver.

In addition, according to a third aspect of the present invention, there is provided a method for controlling Internet access through a mobile communication terminal device having a wireless access point function, wherein the mobile communication terminal device accepts a connection request of a wireless LAN terminal device. And a wireless LAN access step for operating as a wireless LAN access point, a wireless LAN access information reading step of reading wireless LAN access information for the wireless LAN terminal device, and a list of access allowable terminals previously stored in the wireless LAN access information. And a first connection determination step of determining whether to allow internet access based on a mobile communication network according to the first information comparison step for comparison and the result of the comparison.

Preferably, when the connection to the Internet is allowed, the method of controlling the Internet access through the mobile communication terminal device having the WLAN access point function is a port of the application service for the Internet requested from the WLAN terminal device. A port number reading step of reading a number, a second information comparing step for comparing the port number with a previously stored list of access allowable application services, and a second step of determining whether to allow access to the application service according to a result of the comparison It further comprises a connection determination step.

Preferably, when the wireless LAN access information is not included in the access allowable terminal list, the method of controlling Internet access through a mobile communication terminal having the WLAN access point function is connected to the wireless LAN terminal device. The method may further include a user selection step of allowing a user to determine whether to permit access after outputting an impossible guide message on the terminal screen.

Preferably, when the user is allowed to access the wireless LAN terminal device, the method of controlling the Internet access through the mobile communication terminal device having the function of the wireless LAN access point is the wireless LAN terminal in the list of the access terminal. And updating the list to include the device.

Preferably, the method of controlling the Internet access through the mobile communication terminal device having the function of the WLAN access point exceeds whether a preset maximum number of accessible connections is exceeded before informing a user of whether to allow access to the WLAN terminal device. The method may further include a step of determining the number of connections for determining the number of times and an automatic connection blocking step for blocking the connection of the WLAN terminal apparatus when the maximum number of accessible connections is exceeded.

Preferably, the access allowable terminal list is formed by any one or more of a user and a service provider of the mobile communication terminal device.

Preferably, the access allowable application service list is formed by any one or more of a user and a service provider of the mobile communication terminal device.

Accordingly, the present invention not only implements the mobile communication terminal device to operate as a wireless LAN access point, but also controls the Internet access through the wireless LAN in the mobile communication terminal device to block an unauthorized wireless LAN terminal device or an application service of the unauthorized internet. By implementing the system, it is possible to increase the data usage using the mobile communication network associated with the wireless LAN, and abruptly increase the load on the mobile communication network by blocking the generation of data traffic not authorized by the user or service provider of the mobile communication terminal device. There is an advantage to prevent.

In addition, the present invention has the advantage that the user or service provider of the mobile communication terminal device can control the connection of the wireless LAN terminal device or the connection to the application service of the Internet within a specific range.

1 is a block diagram showing an Internet access control system through a mobile communication terminal device having a wireless access point function according to an embodiment of the present invention;
2 is a flowchart illustrating an operation of an internet access control system through a mobile communication terminal device having a WLAN access point function according to an embodiment of the present invention;
3 is a flowchart illustrating a process for performing an access environment for a wireless LAN in the process illustrated in FIG. 2;
4 is a flowchart illustrating a process of controlling a connection of a WLAN terminal device connected to a WLAN access point of a mobile communication terminal device in the process illustrated in FIG. 2;
FIG. 5 is a flowchart illustrating a process of controlling access to an application service of the Internet among the processes illustrated in FIG. 2.

Hereinafter, a preferred embodiment of an Internet access control system through a mobile communication terminal device 200 having a WLAN access point function according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing an Internet access control system through a mobile communication terminal 200 having a wireless access point function according to an embodiment of the present invention. As shown by way of example only in Figure 1, the Internet access control system via a mobile communication terminal device 200 having a wireless LAN access point function is at least one WLAN terminal device 100, WLAN via wireless LAN In response to an access request of the terminal device 100, the mobile station operates as a wireless LAN access point in response to a mobile communication network-based Internet connection, and wireless LAN access information (eg, a MAC (Media Access Control) address) of the wireless device 100. And a mobile communication terminal device 200 for determining whether to allow access to the Internet.

Furthermore, the Internet access control system through the mobile communication terminal device 200 having a wireless LAN access point function is further provided with at least one Bluetooth terminal device when the mobile communication terminal device 200 has a Bluetooth interface. It is also possible.

Here, the mobile communication terminal device 200 operates as a wireless LAN access point in response to a connection request of the wireless LAN terminal device 100, thereby performing Internet access to the wireless LAN terminal device 100 based on the mobile communication network. It acts as a relay.

In addition, the mobile communication terminal device 200 may be connected to another wireless LAN access point to provide Internet access to the wireless LAN terminal device 100 through various paths.

Looking at a more specific configuration for such a mobile communication terminal device 200, a wireless LAN modem unit 220, a wireless LAN access point for accessing a wireless LAN access point or accepting a connection request of the wireless LAN terminal device 100 The multi-connection controller 230 for controlling the wireless LAN access through the wireless LAN modem unit 220 to perform a client function to access the wireless LAN terminal 100 to perform the access request or perform the access request of the wireless LAN terminal device 100. Connection control unit 240 for transmitting and receiving data between the mobile communication modem unit 210, the wireless LAN modem 220 and the mobile communication modem unit 210 for connecting to the mobile communication network for transmitting and receiving voice or data In addition, the application unit 250 for enabling the user to set the environment to block the Internet access to the unauthorized wireless LAN terminal 100 and unauthorized application services, and The LAN terminal (which may be, for example, MAC (Media Access Control) address) information of the WiFi access apparatus 100 read by a control unit 260 for determining whether to allow access to the Internet.

In a further configuration, the mobile communication terminal device 200 is a display / input unit 270 for receiving a user input for the environment setting set in the application unit 250, a Bluetooth modem unit for connecting with the Bluetooth terminal device, and the environment It is also possible to further include a memory unit 280 for storing the setting information for the setting.

If the wireless LAN terminal device 100 is allowed to access the Internet, the controller 260 reads the port number of the application service for the Internet from the wireless LAN terminal device 100 and determines whether to permit the connection. do.

In addition, the mobile communication modem unit 210 is used to provide an existing mobile communication data service through the TCP / IP stack, the TCP / IP stack according to the implementation of the mobile communication terminal device 200 is a wireless LAN or Bluetooth connection It can also be used for data services.

The multi-connection controller 230 performs a function of controlling a wireless LAN connection and a Bluetooth connection, and performs a wireless LAN access point function together with a client function that is a unique function of each interface.

In particular, when operating as a WLAN access point, the multi-connection controller 230 performs setting, allocation, and management of a private IP address for operating as a WLAN access point.

The connection controller 240 performs a function of connecting the multiple connection controller 230 and the application unit 250, and transmits data received from the wireless LAN modem unit 220 or the Bluetooth modem unit to the mobile communication modem unit 210. Or by distributing traffic received from the mobile communication modem unit 210 to a corresponding interface among a plurality of interfaces such as a wireless modem unit or a Bluetooth modem unit.

The application unit 250 provides an environment setting function for a service for linking a wireless LAN and a mobile communication network as well as a function for providing a service provided by a mobile communication, a wireless LAN, or a Bluetooth. This not only enables the user to conveniently set the communication environment in connection with the display / input unit 270, but also supports monitoring status information on the current communication connection.

In addition, the controller 260 may be implemented by controlling the overall operation of the mobile communication terminal device 200 in addition to the above-mentioned function.

2 is a flowchart illustrating an operation of an internet access control system through a mobile communication terminal device 200 having a WLAN access point function according to an embodiment of the present invention. As shown only as an example in FIG. 2, the method for controlling Internet access through a mobile communication terminal device 200 having a WLAN access point function is performed by the WLAN terminal device 100 for a mobile communication request for connection via a wireless LAN. The process proceeds to the terminal device 200 (S1).

Thereafter, the mobile communication terminal device 200 operates as a wireless LAN access point (S3), and wireless LAN access information (for example, may be a MAC (Media Access Control) address) of the wireless LAN terminal device 100. After reading the data and compare with the list of the access terminal that is already stored (S5 and S7).

According to the comparison result in step S7, the mobile communication terminal device 200 determines whether to allow the Internet connection of the wireless LAN terminal device 100 (S9).

According to the determination in step S9, the mobile communication terminal device 200 relays the Internet connection based on the mobile communication network to the wireless LAN terminal device 100 (S11).

Afterwards, when the WLAN terminal device 100 requests access to an application service of the Internet (S13), the mobile communication terminal device 200 reads a port number for the application service and stores the access permission application in advance. It compares with a service list (S15 and S17).

According to the comparison result in step S17, the mobile communication terminal device 200 determines whether to allow the access to the application service and access the application service (S19 and S21).

FIG. 3 is a flowchart illustrating a process for performing an access environment for a WLAN in the process illustrated in FIG. 2. As shown only as an example in FIG. 3, a process for performing an access environment for a WLAN may be performed in a WLAN mode when a user requests a WLAN configuration through an input device of the mobile communication terminal device 200. Display the setting screen (S100 and S102).

Subsequently, the WLAN is divided into a client mode in which the mobile communication terminal 200 can access another WLAN access point, and a mode in which the mobile communication terminal 200 operates as a WLAN access point. It is made (S104).

In step S104, when set to the client mode, and displays information about the wireless LAN access point that the user wants to access, which activates the wireless LAN function mounted on the mobile communication terminal device 200, the access point signal received from the surroundings In order to search for and display the accessible access point on the screen, the access point is accessed according to the user's selection (S106).

Subsequently, when a specific access point is selected in this process, profile information including a parameter required for access of the access point is loaded from a memory or a user can create a profile through parameter setting (S108).

In operation S104, when the WLAN access point mode is selected, the mobile communication terminal device 200 drives the WLAN in the access point mode and establishes a connection to the communication network through the mobile communication network so that the Internet can be used ( S110 and S112).

When the user requests the setting of the access point configuration information, it is possible to set the number of simultaneous accessable terminals, security key value, SSID value, address range to be allocated for private IP (S114).

In addition, when the user selects connection monitoring for the wireless LAN terminal device 100 currently connected to the user, the screen outputs a list of the wireless LAN terminal device 100 currently connected to the mobile communication terminal device 200. (S116).

Among these, when the connection of the specific WLAN terminal device 100 is selected, connection information (for example, MAC address, amount of data used, communication quality based on signal strength, connection state, etc.) for the corresponding WLAN terminal device 100 may be used. ) Are displayed (S118 and S120).

At this time, the user can set the forced connection for a specific connection or allow the connection to be blocked, and change the detailed settings for each connection to connect the connection between the Internet access and the device in the access point. Allow or not can be set (S122 to S126).

On the other hand, when the user manages the connection in the service environment setting, after displaying the access blocking list (S128 and S130), the user can update the access blocking list (S132 and S134).

In addition, if the service option is selected, the AP may select a service to be allowed and a service not to be allowed (S136 and S138).

FIG. 4 is a flowchart illustrating a process of controlling a connection of a wireless LAN terminal device 100 connected to a wireless LAN access point of the mobile communication terminal device 200 according to an embodiment of the present invention. As shown only as an example in FIG. 4, the process of controlling the connection of the wireless LAN terminal device 100 connected to the wireless LAN access point of the mobile communication terminal device 200 is performed by the wireless LAN of the mobile communication terminal device 200. When operating in the access point mode, a connection request of the wireless LAN terminal device 100 for access thereto is received (S200 and S202).

Thereafter, the mobile communication terminal device 200 obtains wireless LAN access information (for example, may be a MAC (Media Access Control) address) of the wireless LAN terminal device 100 (S204).

When it is determined whether the number of terminal devices currently connected exceeds the maximum allowable number of terminals, the connection to the WLAN terminal apparatus 100 is automatically blocked (S206 and S208).

In step S206, when the number of terminal devices currently connected does not exceed the maximum allowable number of terminals, wireless LAN access information (for example, may be a MAC (Media Access Control) address) of the WLAN terminal apparatus 100 and It is compared with the list of the access allowance terminal being stored (S210).

Thereafter, it is determined whether to allow connection of the wireless LAN terminal device 100 according to the comparison result in step S210 (S212).

In addition, when the comparison result in step S210 does not include the WLAN access information (for example, may be a MAC (Media Access Control) address) of the WLAN terminal apparatus 100 in the access allowance terminal list previously stored. In this case, a procedure for additionally allowing this is performed at the user's discretion (S214 to S222).

FIG. 5 is a flowchart illustrating a process of controlling access to an application service of the Internet among the processes illustrated in FIG. 2. As shown only as an example in FIG. 5, the process of controlling access to an application service of the Internet obtains data transmitted and received from the connected WLAN terminal device 100, among which a TCP / UDP port for data. Obtain the information (S300 and S302).

Using the obtained port information, it is determined whether the application service of the Internet to which the WLAN terminal device 100 is to be included is already included in the list of access allowable application services stored in operation S304.

In step S304, if the corresponding application service is not included in the access allowable application service list, the packet constituting the data is discarded and the fact is outputted as a guide message on the terminal screen (S306 and S308).

In operation S304, if the application service is included in the access allowable application service list, the access is allowed (S310).

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the present invention as defined by the following claims It can be understood that

In addition, the present invention not only implements a mobile communication terminal device to operate as a wireless LAN access point, but also controls an Internet connection through a wireless LAN in a mobile communication terminal device to block an unauthorized WLAN terminal device or an application service of an unauthorized Internet. In order to be able to do so, it is an invention with industrial applicability because the possibility of commercialization or business is not only sufficient but also practically obvious.

100: wireless LAN terminal device 200: mobile communication terminal device
210: mobile communication modem unit 220: wireless LAN modem unit
230: multiple connection control unit 240: connection control unit
250: application unit 260: control unit
270: display / input unit 280: memory unit

Claims (16)

At least one wireless LAN terminal device having a wireless LAN; And
In response to a connection request of the WLAN terminal apparatus through the WLAN, an Internet connection based on a mobile communication network operates as a WLAN access point, and reads WLAN access information of the WLAN terminal apparatus to the Internet. And a mobile communication terminal device for determining whether to allow access to the Internet. The Internet access control system of the mobile communication terminal device having a WLAN access point function. A wireless LAN modem unit for accessing a wireless LAN access point or accepting a connection request of a wireless LAN terminal device;
A multi-connection controller configured to perform a client function for accessing the WLAN access point or to control the WLAN access through the WLAN modem to operate as the WLAN access point by performing an access request of the WLAN terminal apparatus;
A mobile communication modem unit for accessing a mobile communication network and transmitting and receiving voice or data;
A connection controller for transmitting and receiving data transmitted and received between the wireless LAN modem unit and the mobile communication modem unit;
An application unit configured to configure an environment for allowing a user to block internet access to an unauthorized wireless LAN terminal device and an unauthorized application service; And
And a control unit for determining whether to allow access to the Internet by reading wireless LAN access information of the wireless LAN terminal device. The method of claim 2,
The mobile communication terminal device further comprises a display / input unit for receiving a user input corresponding to the environment setting. The method of claim 2,
The mobile communication terminal device further comprises a Bluetooth modem unit for connecting with a Bluetooth terminal device. The method of claim 2,
The mobile communication terminal device further comprises a memory unit for storing including the setting information for the environment setting. The method according to any one of claims 2 to 5,
The wireless LAN access information includes a mobile station (MAC) address of the wireless LAN terminal device. The method according to any one of claims 2 to 5,
If the WLAN terminal device is allowed to access the Internet, the controller reads a port number of the application service for the Internet from the WLAN terminal device and determines whether to allow access to the application service. Mobile communication terminal device, characterized in that. The method according to any one of claims 2 to 5,
In the case of operating as the WLAN access point, the multi-connection controller performs the setting, allocation and management of a private IP address for operating as the WLAN access point. The method according to any one of claims 2 to 5,
The access control unit transfers data received from the wireless LAN modem unit to the mobile communication modem unit, or distributes and transmits the traffic received from the mobile communication modem unit to a corresponding interface among a plurality of interfaces including the wireless modem unit. Mobile communication terminal device, characterized in that. A WLAN access step for operating as a WLAN access point when the mobile communication terminal device accepts a connection request of the WLAN terminal device;
A wireless LAN access information reading step of reading wireless LAN access information for the wireless LAN terminal device;
A first information comparing step for comparing the WLAN access information with a list of access permission terminals previously stored; And
And a first connection determination step of determining whether to allow an internet connection based on a mobile communication network according to a result of the comparison. The method of claim 10,
When access to the Internet is permitted, the method of controlling an Internet access through a mobile communication terminal device having the WLAN access point function reads a port number of an application service for the Internet requested from the WLAN terminal device. Reading port number;
A second information comparing step for comparing the port number with a previously stored access allowable application service list; And
And a second connection determination step of determining whether to allow access to the application service according to a result of the comparison. The method of claim 10 or 11,
When the WLAN access information is not included in the access terminal list, the Internet access control method through the mobile communication terminal device having the WLAN access point function is a guide message of no access to the WLAN terminal device. And a user selection step of allowing a user to determine whether to permit access after outputting the data to a terminal screen. 2. The method of claim 1, further comprising a wireless LAN access point function. The method of claim 12,
When the user is allowed to access the WLAN terminal apparatus, the method of controlling Internet access through the mobile communication terminal apparatus having the WLAN access point function may include the WLAN terminal apparatus in the access terminal list. A list updating step for updating; Internet access control method through a mobile communication terminal having a wireless LAN access point function further comprising. The method of claim 10 or 11,
The internet access control method through the mobile communication terminal device having the function of the WLAN access point is for determining whether the preset maximum number of accessible connections is exceeded before instructing the user whether to allow access to the WLAN terminal device. Determining the number of connections; And
An automatic connection blocking step for blocking the connection of the wireless LAN terminal device when the maximum number of accessible connections is exceeded; and the Internet through a mobile communication terminal device having a wireless LAN access point function. Connection control method. The method of claim 10 or 11,
The access permission terminal list is formed by any one or more of a user and a service provider of the mobile communication terminal device, characterized in that the Internet access control method via a mobile communication terminal device having a wireless access point function. The method of claim 11,
The access permission application service list is formed by any one or more of a user and a service provider of the mobile communication terminal device, characterized in that the Internet access control method via a mobile communication terminal device having a wireless access point function.

Images