KR20180014114A - Method for blocking wireless access of a terminal at access point, and device thereof - Google Patents

Abstract

The present invention relates to a method for blocking a wireless access of a terminal at an access point, and a device thereof. According to an embodiment of the present invention, the method comprises the steps of: receiving an access request message for wirelessly accessing an access point from at least one terminal; determining whether the access point is connected to the Internet through a wide area network (WAN); and transmitting an access blocking message for blocking the wireless access of the at least one terminal in response to the access request message when checking that the access point is not connected to the Internet as a result of the determination.

Description

[0001] The present invention relates to a method and an apparatus for blocking a wireless connection of a terminal at an access point,

The present invention relates to a wireless communication system, and more particularly, to a method and apparatus for blocking wireless connection of a terminal at an access point.

With the development of smart devices such as smart phones and tablet PCs, the number of users who access the wireless router and use the Internet wirelessly is increasing rapidly. As the number of users increases, many wireless routers are searched in the streets as well as cafes and restaurants. In addition, there are a lot of routers having the same name, so that users may be automatically connected even if they do not select to connect.

When smart devices are connected to WiFi, 3G has priority over Wi-Fi connection without data communication. If the WiFi is turned on in the smart device, the wireless router is automatically detected and connected. However, if the device is automatically connected to a wireless router that is not connected to the Internet, the smart device may not be able to connect to the Internet and may cause inconvenience to the user. Wireless routers that do not have Internet access (WAN) generate wireless signals and assign IP addresses to smart devices. For this reason, the user may set the Wi-Fi as OFF by default even though the data transmission speed of the Wi-Fi network is much faster, and the user has to turn off the Wi-Fi in the setting of the smart device and connect to the internet through 3G have.

SUMMARY OF THE INVENTION The present invention has been proposed in order to solve the above-mentioned problems of the related art, and it is an object of the present invention to provide a method of blocking a wireless access to a wireless router not connected to the Internet.

It is another object of the present invention to provide a method for reducing an unnecessary load on a wireless router due to an attempt of a terminal to connect to a wireless router not connected to the Internet.

It is still another object of the present invention to provide an apparatus that supports the above-described methods.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory and are not intended to limit the invention to the precise form disclosed. Lt; / RTI >

According to another aspect of the present invention, there is provided a method of intercepting a wireless connection of a terminal in an access point of the present invention includes receiving a connection request message for wirelessly connecting to an access point from at least one terminal, The method comprising the steps of: judging whether or not the access point is connected to the Internet through the WAN, and when it is determined that the access point is not connected to the Internet, And transmitting the message.

According to another aspect of the present invention, there is provided a method for blocking wireless connection of a terminal in an access point of the present invention includes the steps of determining whether or not the access point is connected to the Internet through a wide area network, An IP address release message for releasing an IP address allocated to at least one terminal when the access point is connected to the Internet through an IP (Internet Protocol) And transmitting an access blocking message for blocking wireless connection of the terminal.

According to another aspect of the present invention, there is provided a method of blocking wireless connection of a terminal in an access point of the present invention includes the steps of determining whether the access point is connected to the Internet through a wide area network, And transmitting, in a broadcast format, a beacon message for detecting an access point to at least one terminal only when the access point is present.

In the method for blocking wireless connection of a terminal in an access point of the present invention, the connection blocking message is a deauthentication message in an authentication process of the terminal.

In the access point of the present invention, the access blocking message may be a disassociation message in the connection process of the terminal.

In the access point of the present invention, the access blocking message may be a DHCP (Dynamic Host Configuration Protocol) NAck (Non-Acknowledge) message in the process of assigning an IP address to the AT.

In the method for blocking wireless connection of a terminal in an access point according to the present invention, the step of transmitting an access blocking message includes: when an access point is continuously disconnected from the Internet for a predetermined time or longer, And transmits a blocking message.

A method for blocking wireless connection of a terminal in an access point of the present invention is characterized in that the IP address release message is a DHCP Release message.

According to an aspect of the present invention, there is provided an access point apparatus for receiving an access request message for wirelessly connecting to an access point through an RF unit and at least one terminal through an RF unit, If it is determined that the access point is not connected to the Internet as a result of the determination, an access blocking message for blocking wireless connection of at least one terminal through the RF unit in response to the connection request message is determined And a control unit for transmitting the control signal.

According to another aspect of the present invention, there is provided an access point apparatus comprising: an access point device that is connected to the Internet through an RF unit and a wide area network; and at least one terminal allocates an IP address Receiving an IP address release message for releasing an IP address allocated to at least one terminal through an RF unit and a wireless connection of at least one terminal when the access point confirms that the connection to the Internet is released, And a controller for transmitting a connection blocking message for blocking.

According to another aspect of the present invention, there is provided an access point apparatus comprising: an access point device connected to the Internet through an RF unit and a wide area network; And a control unit for transmitting a beacon message for detecting the access point in a broadcast format via the RF unit.

In the access point apparatus of the present invention, the connection blocking message is a deauthentication message in an authentication process of the terminal.

In the access point apparatus of the present invention, the connection blocking message is a disassociation message in a connection process of the UE.

In the access point apparatus of the present invention, the connection blocking message is a DHCP NAck (Non-Acknowledge) message in the process of assigning an IP address to the UE.

In the access point apparatus of the present invention, the control unit transmits an IP address release message and an access blocking message when the access point is continuously disconnected from the Internet for a predetermined time or more.

In the access point apparatus of the present invention, the IP address release message is a DHCP Release message.

According to the present invention, a wireless router that is not connected to the Internet does not generate a wireless signal, thereby preventing the terminal from accessing the wireless router.

In addition, according to the present invention, unnecessary load of the wireless router can be reduced by preventing repetition of the operation of disconnecting the connection since a plurality of terminals can not connect to the Internet after connecting to the wireless router.

The effects obtained in the present invention are not limited to the effects mentioned above, and other effects not mentioned can be clearly understood by those skilled in the art from the following description .

BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of the specification, illustrate embodiments of the invention and, together with the description, serve to explain the principles of the invention.
1 is an exemplary diagram of a wireless local area network (WLAN) system.
2 is a diagram illustrating signal transmission / reception for a terminal to access the access point in a wireless LAN system.
3 to 5 are diagrams illustrating a process of disconnecting a terminal from an access point not connected to the Internet according to an embodiment of the present invention.
6 is a diagram illustrating a signal transmission / reception process for a terminal to receive an IP address from an access point in a wireless LAN system.
7 to 9 illustrate a process of disconnecting a terminal from an access point not connected to the Internet according to an embodiment of the present invention.
10 is a block diagram illustrating a wireless communication system in which the present invention is implemented.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The following detailed description, together with the accompanying drawings, is intended to illustrate exemplary embodiments of the invention and is not intended to represent the only embodiments in which the invention may be practiced. The following detailed description includes specific details in order to provide a thorough understanding of the present invention. In the description of the drawings, there is no description of procedures or steps that may obscure the technical gist of the present invention, nor is any description of steps or steps enough to be understood by those skilled in the art.

Throughout the specification, when an element is referred to as "comprising" or " including ", it is meant that the element does not exclude other elements, do. Also, the terms " part, "" module," and " module ", etc. in the specification mean a unit for processing at least one function or operation and may be implemented by hardware or software or a combination of hardware and software have. Also, the terms " a or ", "one "," the ", and the like are synonyms in the context of describing the invention (particularly in the context of the following claims) May be used in a sense including both singular and plural, unless the context clearly dictates otherwise.

The specific terms used in the embodiments of the present invention are provided to facilitate understanding of the present invention and the use of such specific terms may be changed into other forms without departing from the technical idea of the present invention.

1 is an exemplary diagram of a wireless local area network (WLAN) system.

The WLAN system includes one or more Basic Service Sets (BSSs). The basic service set is a set of stations (stations, STAs) that can successfully establish synchronization and communicate with each other, and is not a concept of indicating a specific area.

A station is an arbitrary functional medium including a medium access control (MAC) conforming to the IEEE 802.11 standard and a physical layer interface for a wireless medium, and includes an access point (AP) and a non-access Point station (Non-AP STA). A non-access point station is a device operated by a user and includes a terminal, a wireless transmit / receive unit (WTRU), a user equipment (UE), a mobile station (MS) A mobile terminal, a mobile subscriber unit, or the like. For convenience, the station assumes a non-access point station.

The basic service set can be divided into an infrastructure based service set (BSS) and an independent basic service set (independent BSS, IBSS).

1 (a) illustrates an infrastructure-based WLAN system. An infrastructure-based WLAN system consists of a basic service set and a distribution system (DS) connecting each basic service set.

The basic service set consists of a number of stations and access points. An access point is a functional entity that provides a connection to a distribution system via a wireless medium to its associated station. Multiple stations have a connection mechanism as a wireless medium and are wirelessly connected to the access point. Communication between stations is generally made via an access point, but direct communication is also possible between stations when a direct link is established.

The basic services are interconnected through a distribution system. A distribution system may extend wireless coverage by connecting a plurality of basic service sets using an access point to form a single network. The access point can transmit data through the distribution system for stations that are coupled to the base service set it manages. In addition, data can be transmitted through a distribution system when any one of the stations moves to another basic service set. The access point can also transmit data to an external network, such as a wired network, via a distribution system. Such a distribution system does not necessarily have to be a network, and there is no limitation on the form of the distribution system if it can provide a predetermined distribution service defined in IEEE 802.11. An extended network by a distribution system is called an extended service set (ESS). Within the same set of extended services, a station can move from one basic service set to another with a seamless communication. This extended service set has an extended service set identifier (ESSID) which is its own unique identifier.

Figure 1 (b) illustrates an independent set of basic services operating in ad-hoc mode. Since the independent base service set does not include an access point, there is no centralized management entity in the center. That is, in the independent basic service set, stations are managed in a distributed manner and can not directly communicate between stations included in different independent basic service sets. A plurality of independent basic service sets can be configured in such a way as to sufficiently maintain the distance between the independent basic service sets or to use different carrier frequencies.

Hereinafter, embodiments of the present invention will be described with reference to operation in an infrastructure-based WLAN system as shown in FIG. 1 (a), but the present invention is not limited thereto. For convenience, the station is referred to as a terminal.

2 is a diagram illustrating signal transmission / reception for a terminal to access the access point in a wireless LAN system.

Referring to FIG. 2, the access point periodically generates and transmits a beacon message in a broadcast format. The terminal receiving the beacon message detects the presence of the access point. The beacon message includes information on a time stamp, a beacon interval, a capacity, a service set identifier (SSID), and a support rate. The service set identifier is an identifier used by the WLAN system to distinguish a plurality of different basic service sets.

The terminal receives the beacon message and confirms the existence of a plurality of access points connectable through the received beacon messages. This is called passive scanning. The terminal selects a specific access point among a plurality of access points and transmits a probe request message to the selected access point.

On the other hand, the terminal can store the information of the access points that have been previously connected as a profile. The terminal may store the information of the access points which have been previously connected as a profile, select the access point in the profile to be transmitted later without receiving the beacon message, and transmit the probe request message to the selected access point. This is called active scanning.

The access probe request message includes information such as a capability, a service set identifier (SSID), and a supported rate. As described above, the service set identifier is an identifier used for distinguishing the basic service set. Any terminal that does not know the unique service set identifier of the specific basic service set can not access the corresponding basic service set. That is, in order to access a specific basic service set, i.e., an access point, the UE sends a service set identifier to the probe request message.

Upon receiving the probe request message, the access point transmits a probe response message to the terminal in response to the probe request message. The probe response message includes information such as a time stamp, a beacon interval, a regulatory domain, a capacity, an SSID, a support rate, an FH parameter, and a CF parameter set . Such a series of processes is called a search process.

After the searching process, the terminal and the access point perform an authentication process. Specifically, after receiving the probe response message from the access point, the terminal transmits an Authentication Request message to the access point in order to request authentication. Thereafter, the access point transmits an Authentication Response Message to the terminal, thereby establishing authentication between the access point and the terminal.

After the authentication process, the terminal and the access point perform an association process. Specifically, after establishing authentication between the access point and the terminal, the terminal transmits an association request message to the access point. The association request message includes information such as capacity, service set identifier (SSID), and support rate.

The access point is connected to the terminal by transmitting an association response message to the terminal in response to the association request message. At this time, the access point assigns a specific identifier to each terminal in order to distinguish a plurality of terminals, and this identifier is called an association ID (AID). The other response message includes information such as a capacity, a status code, a service set identifier (SSID), and a support rate.

3 is a diagram illustrating a process of disconnecting a terminal from an access point not connected to the Internet according to an embodiment of the present invention.

Referring to FIG. 3, the access point determines whether it is connected to the Internet through the distribution system (S301). The access point may be connected to the Internet through a wide area network (WAN) to which the access point belongs, and determine whether the access point is connected to the Internet according to whether or not the access point has acquired the IP address. Also, it can be determined by using a ping to transmit traffic to a specific host and receive a response thereto. Since the series of procedures for confirming that the access point is connected to the Internet uses known procedures, detailed description will be omitted.

If it is determined that the access point is not connected to the Internet, the access point turns off the generation of the radio signal (S303). That is, the access point does not generate a beacon message to be periodically transmitted, thereby blocking access to the terminal. For example, when the operating system of the access point is Linux, the RF unit can be controlled through a wireless driver installed in the Linux operating system, thereby blocking transmission / reception of radio signals. In case of the manual search, if the access point does not transmit the beacon message, the terminal can not recognize the existence of the access point, and as a result, can prevent connection of the terminal to the access point not connected to the Internet.

On the other hand, when the terminal is connected to the Internet while the access point is connected to the Internet, and the terminal stores the information of the access point as a profile, the terminal may select an access point in the profile and transmit the probe request message at will . Even in this case, the access point turns off the RF unit, so the probe response message is not transmitted to the terminal, and the terminal can not proceed to the access point.

The embodiment according to FIG. 3 proposes a scheme in which a radio signal is not originally generated in order to prevent a wireless connection of a terminal when the access point confirms that the access point is not connected to the Internet before the terminal is connected. Hereinafter, the embodiment according to FIG. 4 suggests a method for blocking the wireless connection of the terminal in the authentication process in order to prevent the wireless connection of the terminal. The same description as in Fig. 3 is omitted.

4 is a diagram illustrating a process of disconnecting a terminal from an access point not connected to the Internet according to an embodiment of the present invention.

Referring to FIG. 4, the access point determines whether it is connected to the Internet through the distribution system (S401).

The access point periodically generates and transmits a broadcast beacon message in step S403, receives a probe request message from the terminal in step S405, and transmits a probe response message to the terminal in response to the received probe request message (S407).

Thereafter, the access point receives an authentication request message from the terminal (S409).

If it is determined in step S401 that the access point is not connected to the Internet, the access point transmits a deauthentication response message to the terminal in response to the authentication request message (S411).

The terminal that has received the authentication release response message no longer performs the handover process, and as a result, the terminal can be prevented from accessing the access point not connected to the Internet.

On the other hand, if it is confirmed that the access point is connected to the Internet in step S401, the access point can transmit an authentication response message to the corresponding terminal in response to the authentication request message.

Meanwhile, in the present embodiment, after confirming that the access point is not connected to the Internet, the terminal and the access point perform the searching process. However, even when the terminal and the access point have checked through the searching process and confirmed that the access point is not connected to the Internet This embodiment can be applied. That is, step S401 may be performed at any point before step S409.

The embodiment according to FIG. 4 shows a method of blocking the wireless connection of the terminal in the authentication process when it is confirmed that the access point is not connected to the Internet before the terminal is connected. Hereinafter, the embodiment according to FIG. 5 discloses a method for blocking wireless connection of a terminal in a connection process to prevent wireless connection of the terminal. The same description as in Fig. 3 or Fig. 4 will be omitted.

5 is a diagram illustrating a process of disconnecting a terminal from an access point not connected to the Internet according to an embodiment of the present invention.

5, when it is determined that the access point is not connected to the Internet, the access point receives the association request message from the terminal in step S509. In response, the access point transmits a Disassociation Response Message (S511). The terminal that has received the association release response message fails to access the access point, and as a result, the terminal can be prevented from accessing the access point that is not connected to the Internet.

On the other hand, if it is confirmed that the access point is connected to the Internet in step S501, the access point can transmit an association response message to the corresponding terminal in response to the association request message.

Meanwhile, in the present embodiment, after confirming that the access point is not connected to the Internet, the terminal and the access point perform the searching process and the authentication process. However, after the terminal and the access point have undergone the searching process and the authentication process, The present embodiment can be applied. That is, the step S501 may be performed at any point before the step S509.

3 to 5 show a method for blocking access to a terminal when the access point confirms that the access point is not connected to the Internet before accessing the terminal. Hereinafter, a method for blocking the wireless connection of the terminal when it is confirmed that the access point is not connected to the Internet in the process of receiving the IP address is presented.

An IP address is a unique identification address assigned to each device for devices that are connected to the Internet to recognize each other and communicate with each other. The IP address can be classified into a public IP address and a private IP address according to the usage range. A public IP address is an IP address authorized by the Internet. It is open to the public and can be searched and accessed by other devices. On the other hand, a private IP address is an arbitrary IP address for use in a private independent network that is not linked to the Internet, and is not searchable and accessible from other external devices.

Using a private IP address, multiple terminals can share a single public IP address and access the Internet individually. For example, a terminal connected to a device having a public IP address of 100.100.100.100 is assigned a private IP address such as 192.168.0.10. As described above, a device that allocates a private IP address to each connected terminal is called an Internet router, a wired / wireless router, or an IP sharing device (IP sharing device). In the present invention, it is assumed that the access point assigns a private IP address to a terminal connected thereto.

The IP address can be classified into a static IP address and a dynamic IP address according to the allocation method. In case of a terminal that is directly connected to the network, the static IP address is set by the user as the public IP address. On the other hand, a dynamic IP address is dynamically assigned a public IP address by DHCP, NAT or the like, and the IP address is automatically set to the terminal without user setting. Hereinafter, a process of assigning an IP address to a terminal connected by an access point using a dynamic host configuration protocol (hereinafter referred to as DHCP) will be described with reference to the drawings.

6 is a diagram illustrating a signal transmission / reception process for a terminal to receive an IP address from an access point in a wireless LAN system.

Referring to FIG. 6, a terminal connected to an access point transmits a DHCP Discover message requesting an IP address to an access point. At this time, since the terminal does not know its IP address and the IP address of the access point, which is a DHCP server, it can transmit a DHCP DISK message in a broadcast format.

The access point receiving the DHCP DISK message transmits a DHCP Offer message to the terminal in response to the DHCP DISK message. The DHCP-provided message includes information such as an IP address, a subnet mask, a period, and a DHCP address that can be assigned by the access point. At this time, since the IP address is not yet assigned to the terminal, the access point can also transmit a DHCP-provided message in a broadcast manner.

The terminal selects a specific IP address from among the IP addresses included in the DHCP providing message and transmits a DHCP Request message to request the selected IP address to the access point. Then, the access point transmits a DHCP Acknowledge (Ack) message, whereby the assignment of the IP address to the terminal is completed.

Meanwhile, the DHCP DISK message is a message transmitted by the UE for the first time to receive an IP address. Accordingly, if the IP address has expired after the IP address is allocated to the terminal, the transmission of the DHCP discovery message may be omitted. That is, if the terminal requests the access point to re-request the IP address, the terminal can receive the DHCP request message to the access point so that the IP address can be reallocated.

7 is a diagram illustrating a process of disconnecting a terminal from an access point not connected to the Internet according to an embodiment of the present invention.

The access point determines whether it is connected to the Internet through the distribution system (S701).

Then, the DHCP discovery message is received from the terminal connected to the access point via the association process (S703). At this time, since the terminal does not know its own IP address and the IP address of the access point, it can transmit the DHCP discovery message in a broadcast format.

If it is determined in step S701 that the access point is not connected to the Internet, the access point does not transmit the DHCP provision message in response to the DHCP discovery message (S705). That is, the access point does not transmit any message in response to the DHCP discover message to the terminal, so that the access point may not provide information such as the IP address to the terminal. As a result, the access point can block the wireless connection of the terminal.

On the other hand, if it is determined in step S701 that the access point is connected to the Internet, the access point transmits a DHCP-provided message in response to the DHCP discovery message to obtain an IP address And so on.

The embodiment according to FIG. 7 shows a method for preventing a wireless connection of a terminal when the terminal confirms that the access point is not connected to the Internet in the process of being allocated an IP address. Hereinafter, the embodiment according to FIG. 8 shows another scheme for blocking the wireless connection of the terminal in the process of the terminal receiving the IP address. The same description as in Fig. 7 will be omitted.

8 is a diagram illustrating a process of disconnecting a terminal from an access point not connected to the Internet according to an embodiment of the present invention.

The access point determines whether it is connected to the Internet through the distribution system (S801).

The access point receives the DHCP discovery message from the terminal (S803), and transmits the DHCP discovery message in response to the DHCP discovery message (S805).

In step S807, the terminal transmits a DHCP request message to request the access point to select an IP address included in the DHCP-provided message.

If it is confirmed in step S801 that the access point is not connected to the Internet, the access point sends a DHCP non-acknowledgment (NAck) message in response to the DHCP Request message (S809). The terminal does not receive the selected IP address by receiving the DHCP confirmation message, and as a result, the access point can block the wireless connection of the terminal.

On the other hand, if it is determined in step S801 that the access point is connected to the Internet, the access point can allocate an IP address to the corresponding terminal by transmitting a DHCP confirmation message in response to the DHCP request message.

Meanwhile, in the present exemplary embodiment, after confirming that the access point is not connected to the Internet, the process of transmitting and receiving the DHCP discovery message and DHCP providing message to the terminal is performed. However, the process of transmitting / receiving the DHCP discovery message and the DHCP providing message to / The present embodiment can be applied even when it is confirmed that the access point is not connected to the Internet after roughing. That is, the step S801 may be performed at any point before the step S807.

7 and 8 show a method for releasing a wireless connection of a terminal when it is confirmed that an access point is not connected to the Internet in the process of being allocated an IP address. 9 illustrates a method for releasing a wireless connection of a terminal when an access point is disconnected from the Internet after the terminal is allocated an IP address and is connected to the access point.

9 is a diagram illustrating a process of disconnecting a terminal from an access point not connected to the Internet according to an embodiment of the present invention.

In a state where the terminal is assigned an IP address from the access point and the terminal and the access point are wirelessly connected, the access point determines whether the access point is connected to the Internet through the distribution system (S901). At this time, the access point can periodically determine whether it is connected to the Internet.

If it is determined in step S901 that the access point is not connected to the Internet, the access point transmits a DHCP Release message to the IP address release message for releasing the IP address allocated to the terminal (S903). At this time, since the terminal is already connected to the access point, the access point can transmit the DHCP release message only when it is confirmed that the access point is not continuously connected to the Internet for a predetermined period of time have.

Then, the access point transmits a Deauthentication Message or a Disassociation Message in order to block the wireless connection of the terminal (S905).

At this time, the access point may transmit only an access blocking message for blocking the wireless connection of the terminal. That is, step S903 may be omitted. However, in order to efficiently manage the IP address resource of the access point, it is preferable to transmit a message for blocking wireless connection after releasing the IP address of the terminal by transmitting a DHCP release message. Also, when one or more terminals are connected to the access point, the DHCP release message, the authentication release message, and the association release message to block the wireless connection of all connected terminals are broadcast or multicast, Format.

Although the above-described embodiments have been separately described for the sake of convenience, it is needless to say that at least two of the embodiments may be used together.

10 is a block diagram illustrating a wireless communication system in which the present invention is implemented.

The access point 100 includes a processor 101, a memory 102, and a radio frequency unit 103. The control unit 101 implements the proposed functions, procedures and / or methods. The layers of the air interface protocol may be implemented by the control unit 101. [ The memory 102 is connected to the control unit 101 and stores various information for driving the control unit 101. [ The RF unit 103 is connected to the control unit 101 to transmit and / or receive a radio signal.

The terminal 200 includes a control unit 201, a memory 202, and an RF unit 203. The control unit 201 implements the proposed functions, processes and / or methods. The layers of the air interface protocol may be implemented by the control unit 201. [ The memory 202 is connected to the control unit 201 and stores various information for driving the control unit 201. The RF unit 203 is connected to the control unit 201 and transmits and / or receives a radio signal.

The memories 102 and 202 may be inside or outside the control units 101 and 201 and may be connected to the control units 101 and 201 by various well-known means. Also, the access point 100 and / or the terminal 200 may have a single antenna or multiple antennas.

The embodiments described above are those in which the elements and features of the present invention are combined in a predetermined form. Each component or feature shall be considered optional unless otherwise expressly stated. Each component or feature may be implemented in a form that is not combined with other components or features. It is also possible to construct embodiments of the present invention by combining some of the elements and / or features. The order of the operations described in the embodiments of the present invention may be changed. Some configurations or features of certain embodiments may be included in other embodiments, or may be replaced with corresponding configurations or features of other embodiments. It is clear that the claims that are not expressly cited in the claims may be combined to form an embodiment or be included in a new claim by an amendment after the application.

In the present document, the embodiments of the present invention have been mainly described with reference to the data transmission / reception relationship between the terminal and the access point. The particular operation described as being performed by the access point in this document may, in some cases, be performed by its upper node. That is, various operations performed for communication with a terminal in a network composed of a plurality of network nodes including an access point may be performed by other network nodes other than the access point or the access point. Do. The access point may be replaced by terms such as a base station, a fixed station, a Node B, an eNode B (eNB), an Internet router, an IP router, and the like. In addition, the terminal may be replaced by terms such as a UE (User Equipment), a Mobile Station (MS), and a Mobile Subscriber Station (MSS).

Embodiments in accordance with the present invention may be implemented by various means, for example, hardware, firmware, software, or a combination thereof. In the case of hardware implementation, an embodiment of the present invention may include one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs) field programmable gate arrays, processors, controllers, microcontrollers, microprocessors, and the like.

In the case of an implementation by firmware or software, an embodiment of the present invention may be implemented in the form of a module, a procedure, a function, or the like which performs the functions or operations described above. The software code can be stored in a memory unit and driven by the processor. The memory unit is located inside or outside the processor, and can exchange data with the processor by various means already known.

It will be apparent to those skilled in the art that the present invention may be embodied in other specific forms without departing from the spirit of the invention. Accordingly, the above description should not be construed in a limiting sense in all respects and should be considered illustrative. The scope of the present invention should be determined by rational interpretation of the appended claims, and all changes within the scope of equivalents of the present invention are included in the scope of the present invention.

Although the method for blocking the connection of the terminal to the access point not connected to the Internet according to the present invention has been described with reference to the example applied to the IEEE 802.11 system, it can be applied to various wireless communication systems other than the IEEE 802.11 system.

100: Access point 101:
102: memory 103: RF section
200: terminal 201:
202: memory 203: RF section

Claims (12)

A method for blocking wireless connection of at least one terminal in an access point not connected to the Internet,
Receiving an access request message for wirelessly connecting to the access point from the at least one terminal;
Determining whether the access point is connected to the Internet through a Wide Area Network (WAN); And
Transmitting an access blocking message for blocking wireless connection of the at least one terminal in response to the access request message when it is determined that the access point is not connected to the Internet as a result of the determination;
/ RTI >
The connection request message includes:
A probe request message in a search process, an authentication request message in an authentication process, and a link request message in a link process,
Wherein the step of transmitting the connection blocking message comprises:
Turning off generation of a wireless signal when the access point determines that the access point is not connected to the Internet in the searching step;
Transmitting an authentication release response message corresponding to the authentication request message when it is determined that the access point is not connected to the Internet in the authentication process; And
Transmitting an association release response message corresponding to the association request message when it is determined that the access point is not connected to the Internet in the association process;
The method comprising the steps of:
Wherein the wireless signal comprises a beacon message,
A method for blocking wireless connection of a terminal at an access point. A method for blocking wireless connection of at least one terminal in an access point not connected to the Internet,
Receiving a DHCP request message from the terminal to request a selected IP address among IP addresses included in the DHCP providing message;
A first step of determining whether the access point is connected to the Internet through a wide area network (WAN) after receiving the DHCP request message;
Transmitting an access blocking message for blocking wireless connection of the at least one terminal when it is determined that the access point is disconnected from the Internet as a result of the first step;
The terminal receives an IP (Internet Protocol) address through the access point and is connected to the access point. The terminal determines whether the access point is connected to the Internet through a wide area network (WAN) Step 2; And
If it is determined that the access point is disconnected from the Internet as a result of the second step, transmitting an IP address release message for releasing the IP address allocated to the at least one terminal
/ RTI >
The access blocking message is a Dynamic Host Configuration Protocol (DHCP) NAck (Non-Acknowledge) message in the process of assigning an IP address to the UE,
The IP address release message is a DHCP (Dynamic Host Configuration Protocol) Release message,
A method for blocking wireless connection of a terminal at an access point. A method for blocking wireless connection of at least one terminal in an access point not connected to the Internet,
Wherein the access point determines whether the access point is connected to the Internet through a wide area network (WAN) in a search process for confirming the existence of the access point before the access point is connected to the access point, step;
Transmitting a beacon message in a broadcast format for detecting the access point to the at least one terminal only when the access point is connected to the Internet as a result of the first step;
A second step of determining whether the access point is connected to the Internet through a wide area network (WAN) before the terminal is connected to the access point and before an IP address is assigned from the access point; And
If it is determined that the access point is connected to the Internet, the DHCP server transmits the DHCP offer message in a broadcast format in response to the DHCP discover message requesting allocation of the IP address to the at least one terminal ;
The method comprising the steps of: 3. The method according to claim 1 or 2,
Wherein the access blocking message is a deauthentication message in an authentication process of the UE. 3. The method according to claim 1 or 2,
Wherein the access blocking message is a disassociation message in a connection process of the UE. 3. The method of claim 2, wherein transmitting the disconnect message comprises:
Wherein the access point transmits the IP address release message and the access blocking message when the access point is continuously disconnected from the Internet for a predetermined time or longer. An access point for blocking wireless connection of at least one terminal when the terminal is not connected to the Internet,
An RF (Radio Frequency) unit; And
Receives an access request message from the at least one terminal through the RF unit to wirelessly access the access point, and determines whether the access point is connected to the Internet through a wide area network (WAN) A controller for transmitting an access blocking message for blocking wireless connection of the at least one terminal through the RF unit in response to the connection request message when it is determined that the access point is not connected to the Internet,
/ RTI >
The connection request message includes:
A probe request message in a search process, an authentication request message in an authentication process, and a link request message in a link process,
Wherein,
If it is determined that the access point is not connected to the Internet in the search process,
When the access point determines that the access point is not connected to the Internet in the authentication process, transmits an authentication release response message corresponding to the authentication request message,
And transmits an association release response message corresponding to the association request message when it is determined that the access point is not connected to the Internet in the association process,
Wherein the wireless signal comprises a beacon message,
Access point device. An access point for blocking wireless connection of at least one terminal when the terminal is not connected to the Internet,
An RF (Radio Frequency) unit; And
Wherein the terminal is allocated an Internet Protocol (IP) address through the access point and is connected to the access point, determines whether the access point is connected to the Internet through a wide area network (WAN) If it is determined that the access point is disconnected from the Internet while the at least one terminal is allocated to an Internet Protocol (IP) address through the access point and is connected to the Internet, A controller for transmitting an IP address release message for releasing an IP address assigned to at least one terminal,
/ RTI >
Wherein,
After receiving a DHCP request message from the terminal to request a selected one of the IP addresses included in the DHCP providing message, the access point confirms that the access point is disconnected from the Internet through a wide area network (WAN) Transmits an access blocking message for blocking wireless connection of the at least one terminal,
The access blocking message is a Dynamic Host Configuration Protocol (DHCP) NAck (Non-Acknowledge) message in the process of assigning an IP address to the UE,
The IP address release message is a DHCP (Dynamic Host Configuration Protocol) Release message,
Access point device. An access point for blocking wireless connection of at least one terminal when the terminal is not connected to the Internet,
An RF (Radio Frequency) unit; And
The access point determines whether the access point is connected to the Internet through a wide area network (WAN) in a search process for confirming the existence of the access point before the access point is connected to the access point, A controller for transmitting a beacon message to the at least one terminal through the RF unit in a broadcast format for detecting the access point only when the access point is connected to the Internet,
/ RTI >
Wherein,
As a result of determining whether the access point is connected to the Internet through the wide area network before the access point is connected to the access point and before the access point is allocated an IP address, Transmitting a DHCP offer message in a broadcast format in response to a DHCP discover message requesting assignment of the IP address to the at least one terminal,
Access point device. 9. The method according to claim 7 or 8,
Wherein the access blocking message is a Deauthentication message in an authentication process of the UE. 9. The method according to claim 7 or 8,
Wherein the access blocking message is a disassociation message in association with the UE. 9. The apparatus according to claim 8,
Wherein the access point transmits the IP address release message and the access blocking message when the access point is continuously disconnected from the Internet for a predetermined time or more.

Images