WO2011013993A2

WO2011013993A2 - Method and system for controlling user access in a wireless communication system

Info

Publication number: WO2011013993A2
Application number: PCT/KR2010/004939
Authority: WO
Inventors: 공동건; 박중신; 이지철; 임내현
Original assignee: 삼성전자 주식회사
Priority date: 2009-07-29
Filing date: 2010-07-27
Publication date: 2011-02-03
Also published as: KR20110012126A; KR101681533B1; WO2011013993A3

Abstract

The invention relates to a system for controlling user access in a wireless communication system, comprising: a femto gateway which transmits a first access request message containing a femto indicator to a macro AAA server when a terminal has made a request for an initial access via a femto base station, and which receives, from the macro AAA server, a first access permission message containing NAI information for indicating an actual NAI of the terminal, and which determines whether or not to permit the network access of the terminal in accordance with whether or not the actual NAI of the terminal is included in a pre-stored CSG list of the femto base station; and said macro AAA server which receives the first access request message from the femto gateway, checks the femto indicator contained in the first access request message, and transmits the first access permission message containing the NAI information for indicating the actual NAI.

Description

Method and system for controlling user access in wireless communication system

The present invention relates to a wireless communication system, and more particularly, to a method and system for controlling user access of a terminal through a network device in a femtocell system.

In recent years, data packet services using a wireless communication system have been increasing rapidly, and its range of use has gradually increased. In order to use this data packet service more usefully, a miniature mobile communication base station (Node B: NB) having a smaller size and a limited function has been installed to be used indoors or in limited places such as homes or offices. As described above, a base station for a small / low power mobile communication installed in a limited place such as an indoor is generally called a femto base station (Femto BS). The user can freely use wired and wireless communication using a mobile station (MS) in a femto cell, which is a service area of the femto base station.

The femto base station has various advantages such as expanding indoor coverage, improving call quality, and efficiently providing various wired and wireless convergence services. Regarding femto base stations, the 3rd Generation Partnership Project (3GPP) is a home enhancement based on Home Node B (HNB) and Long Term Evolution (LTE) technologies based on Wideband Code Division Multiple Access (WCDMA). Node B (home evolved Node B) is defined. WiMAX also defines a network for femto cells, called WiMAX Femto Access Points.

A femto cell covers a relatively very small range compared to a macro cell having a typical size of a cellular system, and a femto cell system including such a femto cell has no inconvenience for users in the femto cell to use communication services. It should be equipped with optimized function. Therefore, improved system design and network support technology are needed for the convenience of users who use communication services through femtocells.

The present invention provides a method and system for controlling user access of a femtocell in a wireless communication system.

The present invention provides a method and system for determining whether to allow a terminal located in a femto cell to enter a network through a femto base station, a femto gateway, or an AAA server in a network and controlling the same.

The present invention provides a method and system for processing an emergency access request of a terminal located in a femto cell through any one of a device in a network, a femto base station, a femto gateway, and an AAA server in a wireless communication system.

In the wireless communication system according to the present invention, when the initial access is requested from the terminal through the femto base station, the system transmits a first access request message including a femto indicator to a macro AAA (Authentication, Authorization, and Accounting) server. After receiving the first access acceptance message including NAI information indicating the actual NAI (Network Access Identifier) of the terminal from the macro AAA server, the CSG (Closed Subscriber) of the femto base station in which the actual NAI of the terminal is pre-stored Group) femto gateway for determining whether to accept the network connection of the terminal according to whether included in the list, and the femto indicator included in the first access request message by receiving the first access request message from the femto gateway Check and include NAI information representing the actual NAI And a macro AAA server for transmitting the first access accept message. A method of controlling user access by a femto gateway in a wireless communication system according to the present invention includes a femto indicator when an initial connection is requested from a terminal through a femto base station. Transmitting an access request message to a macro AAA (Authentication, Authorization, and Accounting) server, and receiving a first access accept message including NAI information indicating the actual network access identifier (NAI) of the terminal from the macro AAA server. Receiving the terminal and determining whether to accept the terminal to access the network according to whether the actual NAI of the terminal is included in a pre-stored Closed Subscriber Group (CSG) list of the femto base station.

In a wireless communication system according to the present invention, a method for controlling user access by a femto AAA (Authentication, Authorization, and Accounting) server includes receiving an access request message from a femto gateway, and actually accessing the access request message to an actual NAI (Network Access Identifier). ) And if the access request message includes the actual NAI, update the pre-stored Closed Subscriber Group (CSG) list by using the actual NAI included in the access request message, Transmitting an access accept message to the femto gateway indicating that a CSG list has been updated, and if the access request message does not include an actual NAI, whether the access request message includes information for requesting the CSG list; It includes the process of checking.

In a wireless communication system according to the present invention, a method for controlling user access by a macro AAA (Authentication, Authorization, and Accounting) server may include receiving an access request message from a femto gateway, and a CSG (Closed) in response to the access request message. And a femto indicator indicating that access control can be performed; and if a femto indicator is included in the access request message, access including NAI information indicating actual network access identifier (NAI). Sending an accept message.

The present invention can control access by a terminal not belonging to a Closed Subscriber Group (CSG) through interaction with a macro operator network at a femto gateway of a WiMAX femto system.

1 is a block diagram showing a schematic configuration of a wireless access system supporting a WiMAX femto base station according to a preferred embodiment of the present invention;

2 is a message flow diagram illustrating a procedure for a femto cell subscriber to update CSG information of a femto base station according to an embodiment of the present invention;

3 is a message flow diagram illustrating a procedure for registering with a femto gateway after an initialization procedure of a femto base station according to an embodiment of the present invention;

4 is a flowchart illustrating the operation of a femto AAA server according to an embodiment of the present invention.

5 is a flowchart illustrating an operation of performing a CSG access control by a femto gateway according to an embodiment of the present invention;

6 is a message flow diagram illustrating a procedure for a femto gateway to perform CSG access control according to an embodiment of the present invention;

7 is a flowchart illustrating the operation of a macro AAA server according to an embodiment of the present invention;

8 is a functional block diagram showing a schematic configuration of a femto gateway for performing authentication of a terminal according to an embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description, only parts necessary for understanding the operation of the present invention will be described, and other background art will be omitted so as not to distract from the gist of the present invention.

Hereinafter, the present invention will use WiMAX, which is a wireless communication network technology based on the Institute of Electrical and Electronics Engineers (IEEE) 802.16 standard. However, the user access control technique, which is a basic object of the present invention, is applicable to other wireless communication systems having a similar technical background and system form without departing from the scope of the present invention, which is a technical skill in the field of the present invention. It will be possible at the judgment of those with knowledge.

1 is a block diagram showing a schematic configuration of a wireless access system supporting a WiMAX femto base station according to a preferred embodiment of the present invention. Here, the case where the macro network operator and the femto cell operator are different from each other is illustrated.

Referring to FIG. 1, the terminal 101 may access a data core network (not shown) through a macro operator network 109 or a femto operator network 110. The macro operator network 109 is an access service network (ASN) that connects the macro base station (BS) 108 that directly connects to the terminal 101 wirelessly and the macro base station 108 to another network node. The server 107 includes an authentication, authorization, and accounting (AAA server) server 106 that manages information of terminals accessible to the gateway 107 and the macro operator network 109. In this specification, the AAA server 106 located in the macro operator network 109 will be referred to as a macro AAA server 106 to distinguish it from the femto AAA server 104 located in the femto operator network 110.

The macro base station 108 provides WiMAX physical and media access control (MAC) layer operation based on, for example, IEEE 802.16. The ASN gateway 107 controls base stations located within the macro operator network 109 and performs a function of routing data flow between the data core network and the base stations. The macro AAA server 106 is responsible for authentication and billing of terminals connected to the macro operator network 109.

The femto base station (BS) 102 belonging to the femto operator network 110 manages a femto-cell, which means a cell that can cover a very small range in a cellular system. It refers to an indoor base station that can be used in the home / office and configured to support the terminal 101 in the femto cell to connect to the data network. The femto base station 102 is connected to the WiMAX operator's data network 110 via an internet service provider (ISP) network 108 that provides a cable network or a digital subscriber line (DSL). have.

The femto base station 102 establishes a virtual private network (VPN) tunnel 107 between the security gateway 105 located in the WiMAX operator network 110, thereby providing the terminal 101 and the operator. It provides a secure connection between the networks 110. The femto base station 102 is connected to the femto gateway 103 in the operator network 110 via the security gateway 105. The femto gateway 103 controls hundreds of thousands of femto base stations, and performs a function of delivering traffic of users located in femto cells in the operator network 110. The femto gateway 103 interoperates with the gateways of the macro cells to provide user mobility, thereby providing continuity for voice / data services between the macro cells and the femto cells, i.e., hand-in / hand-out. To ensure.

The terminal 101 connected to the femto base station 102 uses a data transmission path 106 composed of the femto base station 102, the security gateway 105, and the femto gateway 103, such as the Internet core 109. Connect to The operator network 110 is provided with a femto AAA server 104 for performing authentication and charging of the connected terminal of the network.

Femtocell technology introduces the concept of Closed Subscriber Group (CSG). The femto cell subscriber can create, delete, and change the CSG list to allow the femto base station access only to specific users such as friends and family. The femto base station 102 performs access control of the terminal through the CSG list, and restricts access when a user who does not belong to the CSG list attempts to access. The femto base station 102 may directly store the CSG list or may be provided from a separate device of the network. The CSG list lists IDs of terminals accessible to the network. For example, the IDs include MAC (Media Access Control) addresses or Network Access Identifiers (NAI) of the terminals. In addition to the MAC address or the NAI, another terminal ID may be used for the CSG list.

In order to perform CSG-based user access control in the femtocell technology based on the WiMAX specification, in a process in which the terminal 101 attempts an initial network entry to receive WiMAX service, the network transmits to the femto base station 102. Accept the network entry request of the terminal 101 based on the CSG information (including the CSG list) which is preset or provided to the femto base station 102 from a separate network equipment by a request of the femto base station 102. It is determined whether or not to and whether the result is notified to the terminal 101.

The CSG information set in the femto base station 102 is directly managed by the femto cell operator or by a femto cell subscriber authorized by the femto cell operator. That is, the femto cell subscriber may add, delete, or change each item of the CSG list, that is, the NAI of each terminal allowing access to the femto base station 102 owned by the femto cell. In this case, the femtocell operator does not have information about the NAI added by the femtocell subscriber, and thus the femtocell subscriber cannot confirm whether the input NAI is valid. This is because NAI is managed in the macro operator network.

On the other hand, the terminal 101 must go through the subscriber authentication process through the macro operator network 109 in the process of performing the initial network access procedure to access the femto base station 102. In the subscriber authentication process, the terminal 101 transmits its NAI to the network. However, since the femto base station 102 cannot interpret the NAI transmitted by the terminal during the authentication process, the femto base station 102 transmits the NAI to the macro AAA server 106 of the macro operator network 109 through the femto gateway 103, and the macro. The AAA server 106 interprets the NAI and performs a final authentication procedure. However, the macro network operator cannot perform access control of the terminal 101 because there is no information on the CSG set in the femto base station 102.

Hereinafter, an operation of performing CSG access control according to an embodiment of the present invention will be described. The CSG information such as the CSG list may be stored in advance in the femto base station, or may be stored and managed in a medium or network device other than the femto base station, for example, a management server, a femto AAA server, a separate web server, or the like. When the CSG information is stored in a medium other than the femto base station, the CSG information is delivered to the femto base station in the initial access procedure for the CSG-based user access control. In the following, an embodiment in which CSG information is managed by a femto AAA server will be described, but it should be noted that such a configuration does not limit the scope of the present invention.

2 is a message flow diagram illustrating a procedure for updating a CSG information of a femto base station by a femto cell subscriber according to an embodiment of the present invention.

2, in step 202, the femto base station 102 adds a new user to the CSG list for the femto cell subscriber by the terminal or under the direct control of the femto cell subscriber who is the owner of the terminal. Specifically, the real NAI for the new user is added to the CSG list. Here, for the CSG list, instead of the pseudo NAI temporarily provided when each terminal accesses the network, an actual NAI uniquely and fixedly assigned to each terminal is used. This is because the temporary NAI may change depending on the network state of the terminal. In step 204, the femto base station 102 transmits a CSG request message including an action code set to a value for requesting CSG member registration and a base station identifier (BSID) of the real NAI and femto base station 102. And the base station identifier (BSID) of the real NAI and femto base station 102 is included in an access request message and transmitted from the femto gateway 103 to the femto AAA server 104 in step 206. The operation code included in the CSG request message may indicate the addition ('0') or deletion ('1') of the CSG member.

In step 208, the femto AAA server 104 updates the CSG list by adding the actual NAI to the CSG list stored for the terminal. In step 210, the femto AAA server 104 transmits an access accept message to the femto gateway 103 indicating that the CSG list has been successfully updated. In step 212, the femto gateway 103 successfully transmits the CSG list. The femto base station 102 is notified of the update through a CSG Response message.

As an alternative embodiment of FIG. 2, instead of conveying the actual NAI of the user to be added or deleted, the entire updated CSG list may be passed from the femto base station 102 to the femto AAA server 104.

3 is a message flow diagram illustrating a procedure for registering with a femto gateway after an initialization procedure of a femto base station according to an embodiment of the present invention.

Referring to FIG. 3, after initialization of the femto base station 102 for initial installation or system recovery is performed in step 302, the femto base station 102 registers with the femto gateway 103 for connection with a network in step 304. For this purpose, the " CSG Femto Indicator " and the femto base station 102 of the " CSG Femto Indicator " indicating whether or not the CSG femto base station can perform CSG access control in a Registration Request message transmitted to the femto gateway 103. Forward with BS ID. When the CSG femto indicator included in the registration request message indicates that the femto base station 102 is a CSG femto base station, in step 306 the femto gateway 103 transmits an access request message to the femto AAA server 104. Request the provision of a CSG list for the femto base station 102. For this purpose, the access request message includes a value indicating the CSG information request and the BS ID of the femto base station 102.

In response to the access request message, the femto AAA server 104 transmits an access accept message including the CSG list and the BS ID to the femto gateway 103 in step 308. Here, the CSG list includes NAIs of terminals accessible to the femto operator network. In step 310, the femto gateway 103 stores the CSG list in a local memory for use in subsequent user access control, and in step 312, transmits a registration response message to the femto base station 102, and the registration procedure is successfully completed. To the femto base station 102.

Referring to FIG. 4, the femto AAA server receives an access request message from a femto gateway in step 402, and checks whether an actual NAI is included in the access request message in step 404. If the actual NAI is included, the femto AAA server proceeds to step 406 to check whether the operation code included in the access request message is a value ('0') indicating the addition of the CSG. If the operation code is '0', the femto AAA server adds the actual NAI to the CSG list of the femto base station corresponding to the BS ID included in the access request message in step 408. On the other hand, if the operation code is a value ('1') indicating CSG deletion, the femto AAA server removes the actual NAI from the CSG list of the femto base station in step 416.

Meanwhile, if the access request message does not include the actual NAI in step 404, the femto AAA server checks whether the access request message includes a value indicating the CSG information request in step 410. If a value indicating the CSG information request is included, the femto AAA server includes the CSG list of the femto base station in the access acceptance message and transmits the CSG list to the femto gateway in step 412. On the other hand, if a value indicating the CSG information request is not included, the femto AAA server performs a general AAA server procedure according to the access request message in step 414.

When the CSG list is stored in the femto gateway through the above procedure, the femto gateway may directly perform CSG access control with reference to the CSG list.

5 is a flowchart illustrating an operation of performing a CSG access control by a femto gateway according to an embodiment of the present invention. Here, the case where the femto gateway can operate as a macro gateway will be described.

Referring to FIG. 5, in step 502, the femto gateway receives an EAP Transfer message for initial access from the terminal, and in step 504, whether the terminal is attached to the femto base station or is connected to the macro base station. Check if it is. That is, the femto gateway checks whether the EAP delivery message is received through the femto base station or the macro base station. If the terminal is connected to the macro base station, in step 514 the femto gateway performs a general authentication (Authentication) procedure.

If the terminal is connected to the femto base station, in step 506 the femto gateway, a macro AAA to the access request message including a femto indicator to inform that the terminal 101 is requesting an initial connection through the femto base station 102 Send to server. When the macro AAA server receives the access request message including the femto indicator, the macro AAA server searches for the actual NAI of the terminal requesting the pre-connection and provides the femto gateway. When the femto gateway receives an access accept message from the macro AAA server including the actual NAI of the terminal in response to the access request message in step 508, the real NAI matches one of the NAIs in the pre-stored CSG list in step 510. Check it. If there is a matching NAI, the femto gateway accepts the terminal's network connection and proceeds to step 514 to perform a general authentication procedure. On the other hand, if there is no matching NAI, the femto gateway in step 512 rejects the network connection of the terminal and performs a network exit procedure (Network Exit procedure).

6 is a message flow diagram illustrating a procedure for a femto gateway to perform CSG access control according to an embodiment of the present invention.

Referring to FIG. 6, in step 602, the terminal 101 performs an initial access procedure for the femto gateway 103 through the femto base station 102. In the initial access procedure, the femto base station 102 is a CSG femto base station in a pre-attachment message to indicate that the terminal 101 is performing initial access through the CSG femto base station capable of CSG access control. It forwards to the femto gateway 103 including the CSG femto indicator indicating. In another embodiment, instead of transmitting the CSG femto indicator in the initial access procedure as described above, whenever the femto gateway 103 receives an initial access request message for the terminal from the femto base station 102, the femto base station 102 ) Can be processed to determine whether or not the CSG femto base station. As an example, the femto gateway 103 has information (for example, a database or a table) indicating whether to support the CSG mode for each of the connected femto base stations, and requests initial access from the terminal through any one femto base station. When the message is received, the information may be searched to determine whether the femto base station supports the CSG mode.

In step 604, the femto gateway 103 transmits the request / identity information according to the Extensible Authentication Protocol (EAP) to the terminal 101 through the femto base station 102 to perform the EAP authentication procedure. To start. The EAP request / identification information is carried in a payload of an EAP-transfer message and is transmitted from the femto GW 103 to the femto base station 102 and the femto base station 102 is a private key management (PKM). The EAP transfer message is loaded on a response (PKM-RSP) message and relayed to the terminal 101.

In step 606, the terminal 101 transmits the EAP-response / identification information including the NAI of the terminal 101 to the femto base station 102 through the PKM message, and the EAP-response / identification information is carried in the EAP transmission message. Is passed to the femto gateway 103. Here, the NAI transmitted by the terminal 101 in the EAP authentication procedure may be an actual NAI or a temporary NAI. Therefore, for the CSG inspection, it is necessary to request the actual NAI to the macro AAA server 106 that manages the actual NAI of the terminal 101.

In step 608, the femto gateway 103 includes the femto indicator in the access request message delivered to the macro AAA server 106, indicating that the terminal 101 requesting authentication is requesting initial access through the femto base station 102. Notifies the macro AAA server 106. In response to the request for the initial access, an EAP authentication procedure is performed between the terminal 101 and the macro AAA server 106 in step 610. In the EAP authentication procedure, protocols such as EAP Transport Layer Security (TLS) or EAP Authentication and Key Agreement (AKA) may be used.

In step 612, the macro AAA server 106 delivers the real_NAI information indicating the actual NAI of the terminal 101 requesting the authentication to the femto gateway in the access acceptance message that transmits the authentication result. In this case, the Real_NAI information of the terminal 101 may include the original unencrypted NAI value as it is or may be delivered in the form of a hashed value of the NAI according to the necessity of security. If a hashed value is used, that hash function must be shared between femto gateway 103 and macro AAA server 106 in advance, and the encryption key used in the hash function is included in the access accept message along with the hashed value. And is transmitted from the macro AAA server 106 to the femto gateway 103. In step 614, the authentication result is delivered from the femto gateway 103 to the base station 102 in an EAP delivery message.

In step 616, the femto gateway 103 compares the actual NAI transmitted from the macro AAA server 106 with the pre-stored CSG list in order to confirm whether the terminal 101 is allowed to access the terminal. If a match is found in the CSG list, the femto gateway determines that the terminal 101 belongs to the CSG of the femto base station 102 and finally permits the access request of the terminal 101 (not shown). On the other hand, if a match is not found in the CSG list, the femto gateway 103 determines that the terminal 101 does not belong to the CSG of the femto base station 102, and in step 618, disconnects the network from the terminal 101. Perform the procedure. When the femto gateway 103 receives the hashed value from the macro AAA server 106 in step 612, the femto gateway obtains a hash value of each ID in the CSG list and receives the hash value received from the macro AAA server 106. Compare with If the same hash value is found, the femto gateway 103 determines that the terminal 101 belongs to the CSG of the femto base station 102 and finally permits the access request of the terminal 101.

7 is a flowchart illustrating the operation of a macro AAA server according to a preferred embodiment of the present invention.

Referring to FIG. 7, in step 702, the macro AAA server receives an access request message from a femto gateway, and in step 704, the macro AAA server determines whether the femto indicator indicating that the femto base station can perform CSG access control is included in the access request message. . If the femto indicator is not included, the macro AAA server performs a general authentication procedure in step 706. On the other hand, if the femto indicator is included, in step 708 the macro AAA server delivers the actual NAI to the femto gateway.

DIAMETER or RADIUS (Remote Authentication Dial In User Service) protocol may be used between the femto AAA server and the AAA client (ie femto gateway). When the RADIUS protocol is used, attribute values of messages for communication with a femto AAA server are shown in Table 1 below.

Table 1

Table 2 below is a value representing the CSG information request.

TABLE 2

Table 3 below shows CSG information including a list of CSGs.

TABLE 3

Table 4 below shows a femto indicator indicating that the terminal is connected to the femto base station supporting the CSG.

Table 4

8 is a functional block diagram showing a schematic configuration of a femto gateway for performing CSG access control of a terminal according to an embodiment of the present invention.

As shown, the receiver 806 forwards messages received from network equipment, such as a femto base station, a femto AAA server, a macro AAA server, to the controller 802, and the controller 802 receives via the receiver 806. The extracted messages, extract necessary information, and store the extracted information in the memory 804. The memory 804 performs a function of storing various program codes and information parameters for the operation of the controller 802.

In particular, when the access acceptance message is received through the receiver 806, the controller 802 extracts and stores the CSG list included in the access acceptance message, while the terminal receives an initial access request from the terminal through the femto base station. The terminal receives the actual NAI for the AAA server from the macro AAA server, performs a final authentication decision of the terminal, and finally decides to allow the terminal's access request or perform a network access interruption procedure according to the final determination result.

Meanwhile, in the detailed description of the present invention, specific embodiments have been described, but various modifications may be made without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the scope of the following claims, but also by the equivalents of the claims.

Claims

A control system for user access in a wireless communication system,

When an initial access is requested from a terminal through a femto base station, a first access request message including a femto indicator is transmitted to a macro AAA (Authentication, Authorization, and Accounting) server, and the actual NAI (Network) of the terminal from the macro AAA server. After receiving the first access acceptance message including NAI information indicating an Access Identifier, the terminal accesses the network according to whether the actual NAI of the terminal is included in a pre-stored Closed Subscriber Group (CSG) list of the femto base station. A femto gateway to determine whether to accept; And

A macro AAA server receiving the first access request message from the femto gateway to identify a femto indicator included in the first access request message, and transmitting a first access accept message including NAI information indicating the actual NAI; A control system for user access.
The method of claim 1, wherein the femto gateway,

When receiving a CSG request message indicating that the actual NAI is updated in the CSG list from the femto base station, the actual NAI included in the CSG request message is included in a second access request message to the femto AAA server, and the second access is performed. And receiving a second access accept message in response to the request message to transmit a CSG response message indicating that the CSG list has been updated to the femto base station.
The method of claim 1, wherein the femto gateway,

After the femto base station performs initialization, the femto AAA server receives a registration request message including a femto indicator from the femto base station, and includes a second access request message including information for requesting a CSG list for the femto base station. And a second access accept message including the CSG list in response to the second access request message to store the CSG list.
The method of claim 2, wherein the femto AAA server,

Confirm whether the actual NAI is included in the second access request message; and if the actual NAI is included in the second access request message, a list of previously stored CSGs using the actual NAI included in the second access request message Update a second access accept message to the femto gateway indicating that the CSG list has been updated, and if the second access request message does not include the actual NAI, the second access request message requests the CSG list. And confirming whether or not to include information for controlling the user access.
The method of claim 4, wherein the femto AAA server,

If the second access request message includes information for requesting a CSG list, the second access accept message includes the CSG list of the femto base station and delivers the CSG list to the femto gateway. Control system of access.
The method of claim 2, wherein the second access request message,

And one of an actual NAI to be added to the CSG list, an actual NAI to be deleted from the CSG list, and an entire CSG list.
The method of claim 6, wherein the second access request message,

And an operation code indicating whether to add an actual NAI to the CSG list or to delete an actual NAI from the CSG list.
The method of claim 7, wherein the femto AAA server,

And adding or deleting the actual NAI from the CSG list according to the operation code included in the second access request message.
The method of claim 1, wherein the actual NAI is

And a non-encrypted NAI value and a hashed value of the NAI.
The method of claim 1, wherein the NAI information,

A control system for user access, as shown in Table 5 below.

TABLE 5
The method of claim 3, wherein the information for requesting the CSG list is:

A control system for user access, characterized in that shown in the following Table 6.

TABLE 6
The method of claim 3, wherein the information included in the second access request message comprises:

A control system for user access, as shown in Table 7 below.

TABLE 7
The method of claim 1 and 3, wherein the femto indicator,

A control system for user access, characterized in that shown in Table 8 below.

TABLE 8
A method of controlling user access by a femto gateway in a wireless communication system,

When the initial access is requested through the femto base station from the terminal, transmitting an access request message including a femto indicator to the macro AAA (Authentication, Authorization, and Accounting) server,

Receiving, from the macro AAA server, a first access accept message including NAI information indicating actual NAI (Network Access Identifier) of the terminal;

And determining whether to accept the terminal's network connection according to whether the actual NAI of the terminal is included in a pre-stored Closed Subscriber Group (CSG) list of the femto base station. Way.
The method of claim 14, wherein the femto gateway,

Receiving, from the femto base station, a CSG request message indicating that an actual NAI has been updated in the CSG list;

Transmitting the actual NAI included in the CSG request message to a femto AAA server by including it in a second access request message;

Receiving a second access accept message in response to the second access request message, and transmitting a CSG response message to the femto base station indicating that the CSG list has been updated.
The method of claim 14, wherein the femto gateway,

Receiving, after the femto base station performs initialization, a registration request message including a femto indicator from the femto base station;

Transmitting a second access request message including information for requesting a CSG list for the femto base station to a femto AAA server;

And receiving the second access accept message including the CSG list in response to the second access request message to store the CSG list.
The method of claim 15, wherein the second access request message,

And one of an actual NAI to be added to the CSG list, an actual NAI to be deleted from the CSG list, and an entire CSG list.
The method of claim 17, wherein the second access request message,

And an operation code indicating whether to add an actual NAI to the CSG list or to delete an actual NAI from the CSG list.
15. The method of claim 14, wherein the actual NAI is

And a non-encrypted NAI value or a hashed value of the NAI.
The method of claim 14, wherein the NAI information,

A control method of user access, characterized in that shown in Table 9 below.

TABLE 9
The method of claim 16, wherein the information for requesting the CSG list is:

A control method of user access, characterized in that shown in the following Table 10.

TABLE 10
The method of claim 16, wherein the information included in the second access request message,

A method of controlling user access, which is shown in Table 11 below.

TABLE 11
The method of claim 14 and 16, wherein the femto indicator,

A control method of user access, characterized in that shown in the following Table 12.

TABLE 12
In a method of controlling user access by a femto AAA (Authentication, Authorization, and Accounting) server in a wireless communication system,

Receiving an access request message from a femto gateway,

Checking whether the access request message includes an actual network access identifier (NAI);

If the actual NAI is included in the access request message, the pre-stored Closed Subscriber Group (CSG) list is updated using the actual NAI included in the access request message, and the access acceptance message indicating that the CSG list has been updated is the femto. Sending to the gateway,

If the access request message does not include the actual NAI, checking whether the access request message includes information for requesting the CSG list.
The method of claim 24, wherein the femto AAA server,

And if the access request message includes information for requesting a CSG list, including the CSG list of the femto base station in the access accept message, and transmitting the CSG list to the femto gateway. Way.
The method of claim 24, wherein the access request message,

And one of an actual NAI to be added to the CSG list, an actual NAI to be deleted from the CSG list, and an entire CSG list.
The method of claim 26, wherein the access request message,

And an operation code indicating whether to add an actual NAI to the CSG list or to delete an actual NAI from the CSG list.
The method of claim 27, wherein the updating is performed.

And adding / deleting the actual NAI from the CSG list according to the operation code included in the access request message.
The method of claim 24, wherein the actual NAI is

And a non-encrypted NAI value or a hashed value of the NAI.
The method of claim 24, wherein the NAI information,

A control method of user access, characterized in that shown in the following Table 13.

TABLE 13
The method of claim 24, wherein the information for requesting the CSG list comprises:

A control method of user access, characterized in that shown in the following Table 14.

TABLE 14
The method of claim 24, wherein the information included in the access request message comprises:

A control method of user access, characterized in that shown in the following Table 15.

TABLE 15
In a wireless communication system, a method for controlling user access by a macro AAA (Authentication, Authorization, and Accounting) server,

Receiving an access request message from a femto gateway,

Checking whether the access request message includes a femto indicator indicating that the femto base station can perform CSG access control;

If the femto indicator is included in the access request message, transmitting an access accept message including NAI information indicating an actual network access identifier (NAI).
34. The method of claim 33 wherein the actual NAI is

And a non-encrypted NAI value or a hashed value of the NAI.
The method of claim 33, wherein the femto indicator,

A control method of user access, characterized in that shown in the following Table 16.

TABLE 16