KR20130082202A - Method and apparatus for effectively controlling traffic and managing station session in wifi roaming based on ac-ap association - Google Patents

Abstract

PURPOSE: A method for effectively controlling a traffic and managing a terminal session in a WiFi roaming of a linkage base of an access controller (AC) and an access point (AP) and an apparatus thereof are provided to manage a terminal authentication state of a media access control (MAC) information base about a connection of a user terminal by dividing the authentication state into a connection request, an authentication, and a connection release in the AC. CONSTITUTION: A terminal session table about a terminal authentication state is managed in a database. 징짰A roaming connection from an initial connection or an old AP to a new AP징짱 is determined with reference to the terminal session table about a connection request of a mobile terminal (S20). 징짰An authentication state which corresponds to an identifier of an AP which is connected with a corresponding connection request terminal identifier징짱 is updated in the terminal session table by dividing the initial connection and the roaming connection (S40). 징짰Traffic of a wireless internet service through an AP of a mobile terminal징짱 is controlled by managing the authentication state which is managed in the terminal session table by dividing the authentication state into a connection request, an authentication, or a connection release. [Reference numerals] (AA) 1. extracting MAC information from terminal association; (BB) 2. managing session based on terminal MAC information; (CC) Given terminal MAC is not in table (initial connection); (DD) Given terminal MAC is in table (roaming connection); (EE) 1. generating new entry; (FF) 2. terminal ecology : assoc; (GG) 3. connection AP information generating; (HH) (reauthorization); (II) Auth (reauthorization omit); (JJ) In case of initial connection; (KK,MM) 1. changing terminal state (Assoc -> Auth); (LL) In case of roaming connection; (NN) 2. connection AP change (Old AP ->New AP); (OO) 1. intial connection : Adding Station :Traffic Control; (PP) 2. roaming connection: Adding Station :Deleting Station :Traffic Control; (S10) Terminal Association; (S20) Terminal MAC confirmation; (S22) State confirmation; (S30) Certification/charging; (S70) Finishing process of initial connection and roaming connection

Description

Method and Apparatus for Effectively Controlling Traffic and Managing Station Session in WiFi Roaming Based on AC-AP Association}

The present invention relates to a method and apparatus for operating WiFi roaming, and more particularly, to a terminal session by a premium access controller (AC) and a premium access point (AP) interworking in a tunneling manner according to a control and provisioning of wireless access point (CAPWAP) protocol. The present invention relates to a WiFi roaming operation method and apparatus that can effectively control traffic and manage sessions for access of a user terminal in a WiFi roaming method in which a management function and a traffic control function are separated.

WiFi (Wireless Fidelity) roaming system is a kind of wireless local area network (WLAN) based on IEEE 802.11a / b / g / n standard and provides high-speed wireless to a mobile terminal within a certain distance from an access point (AP). Provide data services.

In the WiFi roaming method using the AP, the AP is in charge of both the terminal session management function and the traffic control function according to the Lightweight Access Point Protocol (LWAPP) protocol.However, with the introduction of the CAPWAP protocol, the AC (Access Controller) is connected to the AP. By interworking with the tunneling scheme to perform the terminal session management function, the high-speed wireless data service is provided to the mobile terminal by reducing the load of the AP.

However, the authentication / billing process is generally made in conjunction with the authentication server (RADIUS) in the AP, in particular, each time the terminal is connected to the new AP due to the movement of the terminal frequently generates traffic related to authentication and billing from the new AP, such as traffic Since session management for control and access of a user terminal is inefficient, there is a need to improve it.

Accordingly, an object of the present invention is to solve the above-described problems, and an object of the present invention is to provide an authentication request (Assoc.), Authentication (Auth.) By disassociating and managing effective traffic control between the AC and the AP based on this, the terminal is connected to the new from the old AP by the tunneling method even if the AC and the AP do not exist in the same subnet. (new) The present invention provides a method and device for operating WiFi roaming, which can effectively omit re-authentication when connecting to an AP and reduce the load of RADIUS.

First, to summarize the features of the present invention, in accordance with an aspect of the present invention for achieving the above object of the present invention, AC (Access Point) on the network interworking with the AP (Access Point) supporting the wireless Internet service of the mobile terminal In the WiFi roaming operation method through a controller, a terminal session table for a terminal-specific authentication status is managed in a database and a roaming connection from an initial access or an old AP to a new AP is referred to with reference to the terminal session table for an access request of a mobile terminal. Determining; And dividing the initial access from the roaming connection and updating an authentication state corresponding to the access request terminal identifier and the identifier of the accessing AP in the terminal session table.

The authentication state managed in the terminal session table is classified and managed as an access request (Assoc.), An authentication (Auth.), Or a disconnection (Disassoc.) To control traffic of the wireless Internet service through the AP of the mobile terminal.

The authentication state corresponding to the access request terminal identifier and the identifier of the accessing AP in the terminal session table for the initial access is updated with an access request (Assoc.), And the authentication of the mobile terminal is performed through communication with an authentication server on the network. After controlling to start the charging in the authentication server through the authentication status to the authentication (Auth.), And allows the access of the mobile terminal to the AP.

For the roaming connection, omit re-authentication for the corresponding mobile terminal and update the authentication status corresponding to the identifier of the new AP connected with the corresponding access request terminal identifier to the terminal session table to Auth. Allow the access of the mobile terminal to the AP, or update the authentication status corresponding to the identifier of the new AP connected with the access request terminal identifier in the terminal session table to the access request (Assoc.), And communicate with the authentication server on the network. After controlling the authentication server to start charging through the authentication of the mobile terminal, the authentication status is updated to Auth. And the mobile station is allowed to access the new AP.

In the WiFi roaming operation method, the connection request terminal identifier and the authentication state corresponding to the identifier of the old AP are updated in the terminal session table as disconnection (Disassoc.), And the connection of the mobile terminal to the old AP is released. Then, receiving the charging information from the old AP and accumulating the charging information for the mobile terminal.

The access request terminal identifier received from the AP may be a MAC address included in the access request of the mobile terminal, and the identifier of the AP may be a MAC address of the AP received from the AP, an SSID of the AP, or a combination thereof. .

According to the WiFi roaming operation method and apparatus according to the present invention, based on the MAC information of the user terminal, the terminal authentication status is divided into AC (Assoc.), Authentication (Auth.), And disconnection (Disassoc.) Based on this, effective traffic control between the AC and the AP is achieved, so that even when the AC and the AP do not exist in the same subnet, they are interworked by tunneling to effectively re-authenticate when the terminal accesses from the old AP to the new AP. Can be omitted and the load on the authentication server (RADIUS) can be reduced.

1 is a view for explaining a communication system for WiFi roaming operation according to an embodiment of the present invention.
FIG. 2 is a diagram for explaining the configuration of the AC (access controller) of FIG. 1.
3 is an example of a terminal session table managed by the AC (access controller) of FIG. 1.
FIG. 4 is a flowchart illustrating a traffic processing method in the AC (access controller) of FIG. 1.
5 is a flowchart illustrating a traffic processing method between AP-ACs when an initial AP access of a user terminal is performed.
FIG. 6 is a flowchart illustrating a method for processing AP-AC traffic when roaming access from an old old AP to a new AP of a user terminal.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference will now be made in detail to the preferred embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to the like elements throughout.

1 is a diagram illustrating a communication system 100 for WiFi roaming operation according to an embodiment of the present invention.

Referring to FIG. 1, the communication system 100 for WiFi roaming operation according to an embodiment of the present invention includes a mobile terminal 110, wireless access points 120 and 130, and an authentication server 140. , And AC (Access Controller) 150.

The wireless APs 120 and 130, the authentication server 140, and the AC 150 interoperate with each other on the network, and the mobile terminal 110 tunnels on the network according to the Control and Provisioning of Wireless Access Points (CAPWAP) protocol. By receiving the wireless Internet service of the premium AC 150 and the premium AP (120/130) to interwork to connect to the network to communicate with other user terminal or Internet server, and can receive the necessary data services. In order to support the wireless Internet service, the AP 120/130 may serve as a traffic control function, and the AC 150 may serve as a terminal session management function to reduce the load of the AP 120/130 for WiFi roaming. The network may be the Internet, and the network may include a wireless mobile communication network such as WCDMA, LTE, WiBro, or a wired telephone network operated by a mobile communication service provider.

The AC 150 may exist in the same subnet that is controlled by the same router as the wireless APs 120 and 130, and the other routers connected to the subnet to which the wireless APs 120 and 130 are connected. It may be on a different subnet under routing control.

The authentication server 140 corresponds to an authentication and billing server that performs a service such as remote authentication dial-in user services (RADIUS) in charge of authentication and billing in a mobile communication network, and corresponds to various authentication schemes of subscriber mobile terminals in a database. If the authentication is successful according to the request of the AC 150 by managing the information for authentication by the billing starts and receives the billing-related information from the AC 150 during the service usage period of the mobile terminal 110 to process the billing statistics. Can be. For example, the authentication method here refers to Media Access Control (MAC) address authentication, Domain Name Server (DNS) authentication, Dynamic Host Configuration Protocol (DHCP) authentication, white list (a list of unblocked websites), or HTTP (port Web authentication based on the number 80, 443, etc.), Extensible Authentication Protocol (EAP) authentication, etc. may be used.

Here, the mobile terminal 110 is a terminal that can use a data service by accessing a network (for example, the Internet) according to a WiFi ( Wireless Fidelity) protocol through wireless APs. It may be, but is not limited to, a cellular phone (PCS phone) (PCS phone: Personal Communications Services phone) that can communicate via wireless APs, synchronous / asynchronous IMT- capable of wireless communication Portable such as 2000 (International Mobile Telecommunication-2000), Personal Digital Assistant (PDA), WAP phone (Wireless application protocol phone), mobile play-station, and other Portable Multimedia Player (PMP) Alternatively, it may be a mobile terminal, a notebook PC, a desktop PC, a Palm Personal Computer, or the like, and in some cases, a home that can communicate with other electronic devices. It may include a variety of electronic devices or devices across the enterprise community.

In particular, in the present invention, the AC 150 to support the WiFi roaming operation in conjunction with the AP (120, 130) on the network as described above between the mobile terminal 110 and the authentication server 140 server. Relaying authentication, assigning an IP (internet protocol) address and controlling access to the APs 120 and 130, requesting an access request (Assoc.) Based on MAC information of the mobile terminal 110; Authentication (Auth.) And Disassocation (Disassoc.) Divided into management and based on this, effective traffic control between the AC 150 and the AP (120/130), AC 150 and AP (120/130) ) Does not exist in the same subnet, and when the terminal 110 is connected to the new AP (130) from the old (old) AP 120 to the new (130) by the tunneling scheme effectively, and the authentication server ( RADIUS) to reduce the load.

To this end, the AC 150 may be configured as shown in FIG. 2. Referring to FIG. 2, an AC 150 according to an embodiment of the present invention includes an authenticator 151, a session table manager 152, a billing processor 153, and a database 155. Such components of AC 150 may be implemented in software, hardware, or a combination thereof, and only the minimum components are shown here to describe the main functions.

The operation of the AC 150 on the communication system 100 for WiFi roaming operation according to an embodiment of the present invention will be briefly described with reference to FIG. 2, and the detailed operation thereof will be described with reference to FIGS. It will be described in more detail with reference to the flowchart of FIG.

First, in FIG. 2, when the authentication unit 151 receives an access request (association) of the mobile terminal 110 from the AP 120/130, the authentication unit 151 allocates an IP address to the mobile terminal 110 and authenticates the authentication server on the network. 140 may control the mobile terminal to start charging through the authentication server 140 through authentication (for example, MAC address authentication) of the corresponding mobile terminal through communication with the mobile terminal, and allow the access of the mobile terminal to the AP 120/130. .

The database 155 stores a terminal session table in which authentication states of the mobile terminals 110 are divided into an access request (Assoc.), Authentication (Auth.), Or disconnection (Disassoc.), As shown in FIG. It is used to control the traffic of the wireless Internet service through the AP (120/130) of the mobile terminals (110).

The session table manager 152 determines the initial connection or roaming connection from the old AP 120 to the new AP 130 with reference to the terminal session table of the database 155 with respect to the connection request of the mobile terminal 110. And distinguishing the initial access from the roaming connection, a corresponding access request terminal identifier (eg, a MAC address received from the AP and included in the access request of the mobile terminal) to the terminal session table and an identifier of the accessing AP. , The MAC address of the AP, the SSID of the AP, or a combination thereof) may be updated. The identifier of the AP may be used by using only the MAC address of the AP as the AP ID. However, in some cases, the AP uses a plurality of SSIDs (Service Set Identifiers) to serve different SSIDs according to its service area. When the access request is performed, the corresponding SSID together with the MAC address of the AP received from the AP may be used as a BSSID (Basic SSID) for identifying the AP.

Using the wireless Internet service of the mobile terminal 110 may be started according to the authentication in the authentication unit 151 for the initial access as described above. In addition, the above roaming connection is allowed to be accessed from the old AP (eg, 120) to the new AP (eg, 130) without authentication at the authentication unit 151 or upon re-authentication. (new) It is possible to start using the wireless Internet service of the mobile terminal 110 through the AP (eg, 130). In the roaming connection, the mobile terminal 110 is disconnected from the old AP (eg, 120), and the charging processor 153 receives the charging information from the old AP (eg, 120). The charging information for the mobile terminal can be accumulated in the database 155.

Hereinafter, an operation of the communication system 100 for WiFi roaming operation according to an embodiment of the present invention will be described in more detail with reference to the flowcharts of FIGS. 4 to 6.

4 is a flowchart for describing a traffic processing method in the AC 150 of FIG. 1.

First, when the user of the mobile terminal 110 intends to use the wireless Internet service in the region where the wireless AP is installed, the mobile terminal 110 connects to the nearest AP 120/130 (initial access / roaming access) request message. (association) is transmitted (S10) and the AP (120/130) delivers it to the AC (150) (S11). The access request message (association) includes the MAC address of the mobile terminal 110, in addition to the parameters required for the request of the wireless Internet service, such as the MAC address of the destination (120/130). The AP 120/130 extracts the MAC address from the connection (initial access / roaming access) request message (association) to the AC 150 for session management based on the MAC address of the mobile terminal 110. do.

Accordingly, the session table management unit 152 of the AC 150 refers to the terminal session table of the database 155 with respect to the corresponding MAC address with respect to the connection request of the mobile terminal 110 to the initial access or the old AP 120. It is determined whether or not the roaming connection to the new AP (130) from (S20).

For the initial connection, the session table manager 152 generates an entry for the terminal and the AP in the terminal session table, but receives a connection request terminal identifier (eg, from the AP and is included in the access request of the mobile terminal). The authentication status corresponding to the identifier (eg, the MAC address of the AP, the SSID of the AP, or a combination thereof, etc.) of the accessing AP with the access request (Assoc.) (S21), and the authentication unit 151. Control to start charging in the authentication server 140 through authentication for the mobile terminal 110 in communication with the authentication server 140 on the network (S30), and updates the authentication status to authentication (Auth.). (S40). That is, the authentication status corresponding to the access request terminal identifier and the identifier of the AP accessing the terminal session table is updated from the access request (Assoc.) To authentication (Auth.) (S41).

On the other hand, for the roaming connection, the session table manager 152 refers to the terminal session table of the database 155 and confirms that the authentication has been performed through the old AP 120, thereby omitting re-authentication for the corresponding mobile terminal ( S22), the identifier (eg, MAC address of the AP) of the new AP 130 connected to the corresponding access request terminal identifier (eg, MAC address received from the AP and included in the access request of the mobile terminal) in the terminal session table. , The SSID of the AP, or a combination thereof may be updated with authentication (S40). That is, since the connected node is changed from the old AP 120 to the new AP 130, the authentication is omitted, but the authentication state is changed to the Auth. State for the identifier of the new AP 130 in the terminal session table. (S42).

In addition, the roaming connection may be re-authenticated. For example, when it is determined that the session table manager 152 is a roaming connection in response to an association request of the mobile terminal 110 (S22). Similar to S21, the access request terminal identifier (eg, MAC address received from the AP and included in the access request of the mobile terminal) and the identifier of the new AP 130 connected (eg, the MAC address of the AP, the AP). And the authentication status corresponding to the SSID, or a combination thereof, to the connection request (Assoc.), And the authentication unit 151 authenticates the mobile terminal 110 by communicating with the authentication server 140 on the network. After controlling to start charging in the authentication server 140 (S30), the authentication status can be updated to authentication (Auth.) (S40). That is, the authentication status corresponding to the identifier of the new AP 130 connected with the access request terminal identifier to the terminal session table may be updated from the access request (Assoc.) To authentication (Auth.).

As described above, when the authentication unit 151 of the AC 150 controls to start charging in the authentication server 140 through authentication of the mobile terminal 110 through communication with the authentication server 140 on the network. When the terminal session table is updated as described above, the mobile terminal 110 may use the wireless Internet service through the accessed AP 120/130.

For example, in step S30, the authentication unit 151 allocates an IP address if there is no assigned IP address for the mobile terminal 110 (eg, MAC address, etc.), and communicates with the authentication server 140 on the network. Authentication (eg MAC address authentication) for the mobile terminal is performed. That is, the authentication unit 151 of the AC 150 requests authentication by transmitting a message including authentication information such as the MAC address of the terminal 110 to the authentication server 140, and the authentication server 140 passes through PAP (Password). If the corresponding information is included in the authentication information (eg, MAC address) for each mobile subscriber managed in the database according to the Authentication Protocol), the AC 150 responds with authentication success information, and charging for the terminal 110 starts. By sending a message informing that the message has been received and the required response (accounting request), the billing processing unit 153 of the AC (150) so that the charging information can be accumulated and notified.

As such, after the authentication unit 151 of the AC 150 controls to start charging in the authentication server 140 through authentication of the mobile terminal 110 through communication with the authentication server 140 on the network, the AP By sending and receiving a message (Adding Station) for allowing the access of the mobile terminal 110 to (eg, 120) (S50 and S60), the mobile terminal 110 uses the assigned IP address to access the AP (eg, 120). By accessing the network through the wireless Internet service can be used (S70).

As such, while the user uses the wireless Internet service through the mobile terminal 110, the user may move to another neighboring area, and so on, so that the mobile terminal 110 covers the old AP (eg, 120). If out of the area, when a new AP (eg, 130) is installed in the corresponding location, the mobile terminal 110 may attempt to connect to the new AP (eg, 130). At this time, the authentication unit 151 according to the terminal session table stored in the database 155 for the connection to the old old AP (eg, 120) without or after re-authentication for the mobile terminal as in S30 A connection to a new AP (eg, 130) may be allowed (S30).

As for the roaming connection to the new AP (eg, 130) as described above, as in S40, the session table management unit 152 in the terminal session table corresponding to the access request terminal identifier and the identifier of the old AP (eg, 120) The corresponding authentication state may be updated to disconnection (Disassoc.), And the authentication unit 151 exchanges and receives a message (Deleting Station) for disconnecting from the old AP (eg, 120) ( S50, S60, release the connection of the mobile terminal 110 to the old AP (eg, 120) (S61), and accordingly, the charging processing unit 153 of the AC 150, the old AP Receiving the charging information from (eg, 120) it is possible to accumulate the charging information for the mobile terminal. The authentication unit 151 transmits and receives a message (Adding Station) for allowing the access of the mobile terminal 110 to a new AP (eg, 130) (S50 and S60), and the mobile terminal 110 is previously described. The wireless Internet service may be used by accessing a network through a new AP (eg, 130) using the assigned IP address (S70).

FIG. 5 is a flowchart illustrating a method of processing traffic between APs and ACs during an initial AP access of the mobile terminal 110.

First, when a user of the mobile terminal 110 intends to use a wireless Internet service in an area where a wireless AP is installed, the mobile terminal 110 transmits an access (initial access) request message (association) to the nearest AP 120. And AP 120 delivers it to the AC (150) (S110). The access request message (association) includes the MAC address (MAC1) of the mobile terminal 110, in addition to the parameters required for the request of the wireless Internet service, such as the destination 120 MAC address. For the session management based on the MAC address of the mobile terminal 110, the AP 120 extracts the MAC address MAC1 from the connection (initial access) request message (association) to authenticate the MAC address (MAC1). Check that it is not in the state, and passes it to the AC (150). Authentication methods refer to Media Access Control (MAC) address authentication, Domain Name Server (DNS) authentication, Dynamic Host Configuration Protocol (DHCP) authentication, white list (list of unblocked websites), or HTTP (port numbers 80, 443, etc.). ), Various methods such as web authentication and Extensible Authentication Protocol (EAP) authentication can be used.

Accordingly, the session table management unit 152 of the AC 150 refers to the terminal session table of the database 155 with respect to the corresponding MAC address with respect to the connection request of the mobile terminal 110 to the initial access or the old AP 120. Determine whether the connection is a roaming connection to the new AP (130), and confirms that the initial connection, and creates an entry for the terminal and the AP in the terminal session table, the AP accessing the access request terminal identifier (eg, MAC1) The authentication status corresponding to the identifier (eg, AP1, SSID, or a combination thereof) is updated with an access request (Assoc.) (S120).

Thereafter, the authentication unit 151 controls to start charging in the authentication server 140 through authentication of the mobile terminal 110 through communication with the authentication server 140 on the network. For example, the authentication unit 151 allocates an IP address if there is no assigned IP address for the mobile terminal 110 (eg, MAC address), and communicates with the authentication server 140 on the network to the mobile terminal. Perform authentication (eg, MAC address authentication). That is, the authentication unit 151 of the AC 150 requests authentication by transmitting a message including authentication information such as the MAC address of the terminal 110 to the authentication server 140, and the authentication server 140 passes through PAP (Password). If the corresponding information is included in the authentication information (eg, MAC address) for each mobile subscriber managed in the database according to the Authentication Protocol), the AC 150 responds with authentication success information, and charging for the terminal 110 starts. By sending a message informing that the message has been received and the required response (accounting request), the billing processing unit 153 of the AC (150) so that the charging information can be accumulated and notified.

After authentication is performed through the authentication unit 151, the authentication status of the corresponding terminal is updated to authentication (Auth.) (S130). That is, an authentication state corresponding to an access request terminal identifier (eg, MAC1) and an identifier (eg, AP1, SSID, or a combination thereof) connected to the terminal session table is authenticated in the access request (Assoc.). Is updated to.)

As described above, after the authentication unit 151 of the AC 150 controls to start charging in the authentication server 140 through authentication of the mobile terminal 110 through communication with the authentication server 140 on the network, After updating the terminal session table as described above, by sending and receiving a message (Adding Station) for allowing the access of the mobile terminal 110 to the AP (eg, 120) (S50, S60), the mobile terminal 110 is assigned A wireless Internet service may be used by accessing a network through an AP (eg, 120) using an IP address (S140). The connected AP 120 may update the authentication status for the MAC address MAC1 and support to use the wireless Internet service as a traffic control.

FIG. 6 is a flowchart illustrating a method of processing AP-AC traffic more when roaming access from the old old AP 120 of the mobile terminal 110 to the new AP 130.

While the user uses the wireless Internet service through the mobile terminal 110, the user may move to another neighboring area, and so on, so that the mobile terminal 110 covers the area covered by the old AP (eg, 120). If the new AP (eg, 130) is installed at the corresponding location, the mobile terminal 110 may attempt to connect to the new AP (eg, 130). The mobile terminal 110 transmits an access (roaming access) request message (association) to a new AP (eg, 130) and the AP 130 transmits it to the AC 150 (S210). The access request message (association) includes the MAC address (MAC1) of the mobile terminal 110, in addition to the parameters required for the request of the wireless Internet service, such as the destination 120 MAC address. For the session management based on the MAC address of the mobile terminal 110, the new AP 130 extracts the MAC address (MAC1) from the access (initial access) request message (association) MAC address (MAC1) Confirm that there is no authentication for the state, and passes it to the AC (150). Authentication methods refer to Media Access Control (MAC) address authentication, Domain Name Server (DNS) authentication, Dynamic Host Configuration Protocol (DHCP) authentication, white list (list of unblocked websites), or HTTP (port numbers 80, 443, etc.). ), Various methods such as web authentication and Extensible Authentication Protocol (EAP) authentication can be used.

Accordingly, the session table manager 152 of the AC 150 refers to the terminal session table of the database 155 with respect to the MAC address MAC1 with respect to the connection request of the mobile terminal 110 and establishes an initial connection or connection. It determines whether it is a roaming connection from the AP 120 to the new AP 130, confirms that it is a roaming connection, and confirms that the authentication has been performed through the old AP 120 by referring to the terminal session table of the database 155. Re-authentication for the mobile terminal is omitted (S220), and the identifier (eg, AP1, SSID, combination thereof, etc.) of the new AP 130 connected with the corresponding access request terminal identifier (eg, MAC1) to the terminal session table. ) May be updated to authentication (Auth.) (S230). That is, since the connected node is changed from the old AP 120 to the new AP 130, the authentication is omitted, but the authentication state is changed to the Auth. State for the identifier of the new AP 130 in the terminal session table. .

As also described with reference to FIG. 4, the roaming connection may be re-authenticated. For example, the session table manager 152 may be a roaming connection for an association request of the mobile terminal 110. If it is determined, the authentication status corresponding to the access request terminal identifier (eg, MAC1) and the identifier (eg, AP1, SSID, or a combination thereof, etc.) of the new AP 130 connected to the access request (Assoc.) Is updated. And, the authentication unit 151 controls to start charging in the authentication server 140 through the authentication for the mobile terminal 110 in communication with the authentication server 140 on the network (see the authentication process of Figure 5) The authentication status may be updated to Auth. That is, at this time, the authentication status corresponding to the identifier of the new AP 130 connected to the access request terminal identifier in the terminal session table may be updated from the access request (Assoc.) To authentication (Auth.).

As for the roaming connection to the new AP (eg, 130) as described above, as in S40, the session table management unit 152 in the terminal session table corresponding to the access request terminal identifier and the identifier of the old AP (eg, 120) The corresponding authentication status may be updated to Disassoc. (S230), and the authentication unit 151 may give a message (Delete Station) to disconnect from the old AP (eg, 120). In response, the connection of the mobile terminal 110 to the old AP (eg, 120) is released, and accordingly, the charging processing unit 153 of the AC 150 receives the old AP (eg, 120). Receiving the charging information from the charge information for the mobile terminal can be cumulatively calculated. The authentication unit 151 exchanges a new AP (eg, 130) with a message (Add Station) for allowing access of the mobile terminal 110 to the new AP (eg, 130), thereby allowing the mobile terminal 110 to access the AP (eg, 120). Wireless Internet service can be used by accessing a network through a new AP (eg, 130) using an IP address previously assigned through the AP. The connected new AP (eg, 130) may update the authentication status for the MAC address (MAC1) and support to use the wireless Internet service with traffic control.

As described above, both the traffic of the control / data channel for session management (authentication / charging, etc.) and the user traffic generated when the mobile terminal 110 uses the Internet service are transmitted and received through the AC 150 by a central processing method. In some cases, the user traffic generated when the mobile terminal 110 uses the Internet service is distributed through a network such as an L2 switch or a router without passing through the AC 150 by a distributed processing method for load balancing. It may be directly transmitted and received, and only traffic of the control / data channel for session management may be transmitted and received through the AC (150).

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined by the equivalents of the claims, as well as the claims.

Mobile terminal 110
Wireless APs 120, 130
Certificate Server (140)
AC (150)
Authentication unit (151)
Session Table Manager 152
The charging processing unit 153,
Database (155)

Claims (7)

In the WiFi roaming operation method through an access controller (AC) on a network interworking with an access point (AP) supporting a wireless Internet service of a mobile terminal,
Managing a terminal session table for a terminal-specific authentication state in a database and determining an initial connection or a roaming connection from an old AP to a new AP with reference to the terminal session table for an access request of a mobile terminal; And
Distinguishing the initial access from the roaming connection and updating an authentication state corresponding to the access request terminal identifier and the identifier of the accessing AP in the terminal session table;
WiFi roaming operation method comprising a. The method of claim 1,
The authentication state managed in the terminal session table is classified and managed as an access request (Assoc.), Authentication (Auth.), Or disconnection (Disassoc.) To control traffic of the wireless Internet service through the AP of the mobile terminal. WiFi roaming operation method characterized in that. The method of claim 1,
The authentication state corresponding to the access request terminal identifier and the identifier of the accessing AP in the terminal session table for the initial access is updated with an access request (Assoc.), And the authentication of the mobile terminal is performed through communication with an authentication server on the network. WiFi roaming operation method characterized in that the control to start the charging in the authentication server through the authentication state to the authentication (Auth.), And allows the access of the mobile terminal to the AP. The method of claim 1,
For the roaming connection,
Omits re-authentication for the mobile terminal and updates the authentication state corresponding to the identifier of the new AP connected with the access request terminal identifier to the terminal session table with authentication (Auth.), And connects the mobile terminal to the new AP. Allow,
The authentication status corresponding to the identifier of the new AP connected with the access request terminal identifier in the terminal session table is updated with an access request (Assoc.), And the authentication is performed through authentication with the mobile terminal through communication with an authentication server on a network. And controlling the server to start charging and updating the authentication status to Auth. And allowing access of the mobile terminal to the new AP. 5. The method of claim 4,
The connection request terminal identifier and the authentication status corresponding to the identifier of the old AP are updated in the terminal session table to disconnection (Disassoc.), And the mobile terminal is disconnected from the old AP. Accumulating the charging information for the mobile terminal by receiving the charging information;
WiFi roaming operation method comprising a. The method of claim 1,
The access request terminal identifier received from the AP is a WiFi roaming operation method, characterized in that the MAC address included in the access request of the mobile terminal. The method of claim 1,
The identifier of the AP is a WiFi roaming operation method, characterized in that the MAC address of the AP, the SSID of the AP, or a combination thereof.

Images