KR100737903B1 - Method for accessing an unopened terminal to wibro network for remote real time subscription and opening to wibro service - Google Patents

Abstract

A connection method to a WiBro network by a yet-to-opened(no authorization) terminal for remotely subscribing to a WiBro service in real time and opening(authorization) is provided to allow a general store such as a discount store to sell a WiBro terminal and a UICC(Universal IC Card). An unopened terminal sets its authorization policy support field as a no-authorization type and attempts a connection to a WiBro network(S101). According to the request of connection attempt, a base station checks whether information of the corresponding terminal exists in an unopened terminal information database and transmits a message having the same authorization policy support field value as that of the unopened terminal to the unopened terminal(S108). The unopened terminal checks the authorization policy support field value received from the base station, and requests its registration from the base station in a state of omitting authorization. The base station confirms that the corresponding terminal has been permitted for a connection to the WiBro network in the no-authorization mode and registers the terminal(S111). The unopened terminal is allocated an IP from a DHCP(Dynamic Host Configuration Protocol) server and is connected to a subscription/opening system(S112,S113).

Description

Method for accessing an unopened terminal to wibro network for remote real time subscription and opening to wibro service

1 is a flowchart illustrating an execution process of a method of accessing an unopened terminal to a WiBro network for remote real-time subscription and opening of a WiBro service according to an embodiment of the present invention.

FIG. 2 is a diagram illustrating a signal transmission / reception relationship between an unopened WiBro terminal, a base station, an authentication server, and a subscription / opening system related to the execution of the method according to the flowchart of FIG. 1.

3 is a view illustrating a state in which an unopened terminal is restricted to only access to a subscription / opening system according to a method of accessing a wibro network for a remote real-time subscription and opening of a WiBro service according to an embodiment of the present invention. drawing.

<Explanation of symbols for the main parts of the drawings>

210 ... unopened WiBro terminal 220 ... base station

230 ... unopened terminal information database 240 ... authentication server

250 ... DHCP Server 260 ... Subscription / Opening System

The present invention relates to a method of accessing an unopened terminal to a WiBro network for remote real-time subscription and opening of a WiBro service. Particularly, in a connection of an unopened terminal to a WiBro service, a subscription is performed only for a non-opened terminal remotely. A method of accessing an unopened terminal to a WiBro network for remote real-time subscription and opening of a WiBro service enabling limited access to an open / open system.

In general, in a mobile communication network such as Global System for Mobile Communication (GSM) and Code Division Multiple Access (CDMA), a remote opening using SMS (Short Message Service) and a signaling channel is possible even in a terminal that is not opened. In Wireless Broadband), a wireless section specification for remote opening such as a mobile communication network is not defined, so remote real-time opening is impossible for an unopened terminal.

In WiBro service, which is currently commercially available and provided, in order for a user traffic to be transmitted to a network, a corresponding terminal must go through an authentication procedure after registering with a base station. However, the unsubscribed and unopened terminal fails to authenticate the connection and thus cannot transmit user traffic to the network. Currently, in WiBro service, there is no approach to the subscription opening system for the subscription and opening of such an unopened terminal.

The present invention has been made in view of the above-described matters, and in connection to a WiBro service of an unopened terminal, the WiBro service remotely enables a WiBro network connection to be limited to the unopened terminal only for remote access and opening. An object of the present invention is to provide a method of accessing an unopened terminal to a WiBro network for real-time subscription and opening.

In order to achieve the above object, a method of accessing an unopened terminal to a WiBro network for remote real-time subscription and opening of a WiBro service according to an aspect of the present invention is provided.

A base station that receives a request for connection to a WiBro service (network) from an arbitrary terminal and delivers it to an upper server or system side, and an authentication server that receives a signal from the base station and transmits a corresponding signal (data) related to authentication or authorization. In a connection method of an unopened terminal to a WiBro service (network) having a DHCP server and a subscription / opening system,

a) an unopened terminal attempts to access a WiBro network by setting its authentication scheme support field to an unauthenticated scheme;

b) confirming, by the base station, whether the information of the corresponding terminal is in the unopened terminal information database according to the access attempt request, and transmitting a message having the same authentication method support field value as the unopened terminal to the unopened terminal;

c) checking, by the unopened terminal, an authentication method support field value from the base station, and requesting registration from the base station in a state in which the authentication is omitted;

d) confirming and registering, by the base station, that the terminal is an unopened terminal permitted to access the WiBro network in an unauthenticated mode according to the registration request;

e) the non-opening terminal is assigned an IP from the DHCP server according to the registration, and accessing a subscription / opening system.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention.

In addition, when a part is said to "include" a certain component, this means that it may further include other components, except to exclude other components unless otherwise stated.

A method of accessing an unopened terminal to a WiBro network for remote real-time subscription and opening of a WiBro service according to an embodiment of the present invention will now be described in detail with reference to the accompanying drawings.

1 is a flowchart illustrating an execution process of a method of accessing an unopened terminal to a WiBro network for remote real-time subscription and opening of a WiBro service according to an embodiment of the present invention, and FIG. 2 is an unopened WiBro terminal, a base station, an authentication server, and a subscription. Figure shows the signal transmission / reception relations related to WiBro remote subscription / opening between / open systems.

Prior to describing the method of accessing a WiBro network of an unopened terminal for remote real-time subscription and opening of a WiBro service according to an embodiment of the present invention, the process of the method of the present invention, which will be described below, is implemented to implement the method of the present invention. It is assumed that each of these subroutines is created in one general software program and stored in advance in the authentication server, the DHCP server, the subscription / opening system, the base station, and the terminal.

1 and 2, first, the unopened terminal 210 attempts to access a WiBro service (network) (step S101). At this time, the non-opening terminal 210 attempts to authenticate using the Media Access Control (MAC) address as an ID. In response to the authentication attempt as described above, the base station 220 transmits the authentication request to the authentication server 240 (step S102). At this time, the base station 220 also stores the MAC information for the unopened terminal in the database 230, and manages the information so that proper processing can be performed when there is an access attempt for later opening.

On the other hand, the authentication server 240 receiving the authentication request transmits an authentication error message that the terminal requesting authentication is not a terminal because it is not subscribed (step S103), and the base station 220 receives the non-opening terminal 210. (Step S104). At this time, the base station 220 also registers the MAC address of the unopened terminal as the "unopened terminal" in the database 230.

Upon receiving the authentication error message from the base station 220, the unopened terminal 210 displays the error message on the display (step S105) and asks whether or not to subscribe to the WiBro service (network) (step S106). In this subscription determination, if no subscription is made (that is, the user selects not to subscribe), WiBro immediately terminates the connection. In the case of subscribing at the step S106, the user (terminal) retries the connection by setting his authentication policy support field to the No Authorization method (step S107). That is, the terminal changes the value of the Authentication Policy Support field of the Security Negotiation Parameters in the Subscriber Station Basic Capability-Request (SBC-REQ) message from "010010" to "000000" (No Authorization). Retry the connection by setting to omit the authentication procedure.

Here, descriptions will be made in relation to the security related parameters (Security Negotiation Parameters) and authentication policy support.

Security Negotiation Parameters represent a complex attribute that indicates the security (security) possibilities to be negotiated prior to performing the initial and reauthentication procedures. The following is an example of reference standard 1 (in SBC-REQ / RSP message) of IEEE 802.16e-2005.

For example, in the embodiment of the present invention, as in the "Sub-attribute" of the "Security Negotiation Parameters" table above, security-related matters include "authentication method support", "message authentication code method" do.

Meanwhile, authentication policy support (Authorization Policy Support) indicates the authentication method used by the mobile station (MS) or the base station (BS) for negotiation or synchronization. Bit values of "zero" are not supported while bit values of "1" are supported. The following is an example of reference standard 2 (in an SBC-REQ / RSP message) in IEEE 802.16e-2005.

For example, in the embodiment of the present invention, "Bit # 1" and "Bit # 5" are used in the above authentication method support table.

In this way, when the terminal 210 retries the connection, the base station 220 checks whether the information of the corresponding terminal is in the unopened terminal information database 230 according to the access retry request (step S108), and registers as an unopened terminal. If it is not registered (step S109), the terminal is instructed to undergo authentication if it is not registered as an unopened terminal (step S110). If it is registered as an unopened terminal, a message having the same authentication method support field value is transmitted to the unopened terminal. That is, when the SBC-REQ set to No Authorization is transmitted from the terminal 210 having the MAC information being managed as an unopened terminal, the base station 220 also supports the authentication method of security related parameters (Security Negotiation Parameters). Policy Support) field is set equal (ie, set to "000000") to transmit an SBC-RSP (response) message to the unopened terminal 210. At this time, the base station 220 permits the connection with no authorization, and sets it to restrict access only to the subscription / opening system 260 as shown in FIG. 3 (step S111).

If the terminal having the MAC information not included in the unopened terminal database 230 sends the same SBC-REQ, the base station 220 adjusts the Authentication Policy Support field to "010010". Take steps to ensure certification. By doing so, it is possible to limit intentional network connection of unauthorized terminals and to enhance security to allow connection in an unauthenticated mode only for opening.

In this way, when the SBC-RSP message for allowing an unauthenticated access is transmitted from the base station 220, the terminal 210 receiving the SBC-RSP message confirms the value of the authentication method support field from the base station 220, and the base station is in a state where the authentication is omitted. Request registration to step 220 (step S112). That is, the terminal 210 transmits and receives an SBC-REQ and an SBC-RSP message with no authorization, and then transmits a REG (Registration) -REQ message to the base station 220, and the base station 220 transmits the terminal 210. In addition to transmitting the REG-RSP message to the terminal 210 registers the base station 220. Accordingly, the terminal 210 succeeds in accessing the WiBro network with no authentication.

Thereafter, the base station 220 transmits a dynamic service addition (DSA) -REQ message to the terminal 210. At this time, the base station 220 recognizes that the corresponding terminal is managed as an unopened terminal, and the uplink and downlink are connected to the IP allocation and opening / opening system 260 for subscription and opening only. Only one DSA-REQ, DSA-RSP, and DSA-ACK (acknowledge) message is generated.

That is, the base station 220 sets up and downlinks to which predetermined classification rules are applied, and notifies the non-opening terminal 210 (steps S113 to S115). I'll explain more about this.

That is, the base station 220 first transmits a DSA-REQ message for establishing an uplink including two classification rules as follows.

<Upward Connection>

Classification rule 1: Target IP address [DHCP (Dynamic Host Configulation Protocol) server IP address]

Classification rule 2: Target IP address

Upon receiving the DSA-REQ message, the terminal 210 applies two classification rules transmitted for uplink and transmits a DSA-RSP message. After receiving the DSA-RSP message, the base station 220 transmits a DSA-ACK (acknowledge) message to complete the uplink.

Thereafter, the base station 220 transmits a DSA-REQ message for establishing downlink by applying the following two classification rules.

<Downward connection>

Classification rule 1: Source IP address

Classification rule 2: Source IP address

After receiving the DSA-REQ message, the terminal 210 transmits the DSA-RSP, and the base station 220 transmits the DSA-ACK message in response to complete the downlink connection.

Here, a little more explanation will be made regarding the classification rules applied to the above-described uplink / downlink connections.

According to the definition of the 802.16e-2005 classifier of the Institute of Electrical and Electronics Engineers (IEEE), the classification rule means that traffic that does not satisfy the classification rule specified for the connection cannot be transmitted through the connection. If the classification rule is set, blocking actions are made so that packets cannot be transmitted or received except for the DHCP server 250 and the subscription / opening system 260.

When the up / down connection is completed in this way, the terminal 210 receives an IP from the DHCP server 250 through the set up / down connection, and accesses to the subscription / opening system 260 to subscribe and open information. Enter (steps 116, 117). In this case, in order to protect the user information input during the subscription and the opening between the terminal 210 and the base station 220, preferably, Secure Sockets Layer (SSL) is applied.

Here, when the base station 220 is notified of the completion of the terminal registration and opening of the terminal from the authentication server 240, deletes the MAC information of the terminal from the unopened terminal information database 230, and later connects to WiBro by a normal access procedure Only make it possible.

Only the traffic between the terminal and the DHCP server and the terminal and the subscription / opening system can be transmitted through the up / down connection configured as described above. In the case of other traffic, the uplink is determined by the classification rule in the terminal. However, the downlink is dropped by the classification rule in the base station. This prevents traffic other than traffic for opening into the WiBro network.

Although the embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concepts of the present invention defined in the following claims are also provided. It belongs to the scope of rights.

As described above, the method of connecting an unopened terminal to the WiBro network for remote real-time subscription and opening of the WiBro service according to an embodiment of the present invention is to remotely access the unbroken terminal to the WiBro service. Since WiBro network access is limited to subscription and opening only, it has the following advantages and effects.

1) The user can remotely subscribe and open the service without having to go to the service provider's agency to subscribe and open the service.

2) Since subscription and opening are possible remotely, users do not need to visit the dealership, so the distribution of WiBro terminal and UICC (Universal IC Card) is free, and can be sold in general distribution stores such as discount stores.

Claims (6)

A base station that receives a request for connection to a WiBro service (network) from an arbitrary terminal and delivers it to an upper server or system side, and an authentication server that receives a signal from the base station and transmits a corresponding signal (data) related to authentication or authorization. In a connection method of an unopened terminal to a WiBro service (network) having a DHCP server and a subscription / opening system, a) an unopened terminal attempts to access a WiBro network by setting its authentication scheme support field to an unauthenticated scheme; b) confirming, by the base station, whether the information of the corresponding terminal is in the unopened terminal information database according to the access attempt request, and transmitting a message having the same authentication method support field value as the unopened terminal to the unopened terminal; c) checking, by the unopened terminal, an authentication method support field value from the base station, and requesting registration from the base station in a state in which the authentication is omitted; d) confirming and registering, by the base station, that the terminal is an unopened terminal permitted to access the WiBro network in an unauthenticated mode according to the registration request; e) a method of connecting an unopened terminal to a WiBro network for remote real-time subscription and opening of a WiBro service, wherein the unopened terminal is assigned an IP from the DHCP server according to the registration and accesses a subscription / opening system. In claim 1, In the registration of the non-opening terminal in step d), the base station permits connection without authentication, and restricts and configures only access to the subscription / opening system, thereby setting the non-opening terminal for remote real-time subscription and opening of the WiBro service. How to connect to WiBro network. In claim 1, After the registration of the non-opening terminal in step d), the base station establishes an uplink and a downlink to which a predetermined classification rule is applied, and notifies the non-opening terminal to the remote real-time subscription and opening of the WiBro service. How to connect to WiBro network of terminal. In claim 3, In the configuration of the uplink and the downlink to which the predetermined classification rule is applied, the uplink uses the following two rules, <Upward Connection> Classification rule 1: Target IP address [DHCP (Dynamic Host Configulation Protocol) server IP address] Classification rule 2: Target IP address And, the downlink uses the following two rules, <Downward connection> Classification rule 1: Source IP address Classification rule 2: Source IP address A method for accessing a WiBro network of an unopened terminal for remote real-time subscription and opening of a WiBro service, each of which is applied. In claim 1, In the access to the subscription / opening system of the unopened terminal in the step e), the WiBro service, characterized in that the application of the SSL (Secure Sockets Layer) for the protection of the user information input during the subscription and opening between the terminal and the base station A method of accessing an unopened terminal to a WiBro network for remote real-time subscription and opening. In claim 3, In response to the notification of the unopened terminal, the unopened terminal applies respective classification rules transmitted for uplink and downlink, and notifies the base station of the result; And And allowing traffic to be passed by the base station in accordance with the notification, and completing an up / down connection.

Images