KR101129246B1 - Terminal Connected to Wi-Fi Network and Method of Connection - Google Patents

Abstract

A mobile terminal connected to a Wi-Fi network and a method thereof are disclosed. The mobile terminal includes a display unit; A memory unit including mobile communication subscriber authentication information (IMSI); An input unit for receiving a Wi-Fi network connection request or disconnection request from a user; A wireless communication unit including a WCDMA communication module, a WIBRO communication module, and a Wi-Fi communication module for transmitting and receiving data by connecting to a WCDMA network, a WIBRO network, and a Wi-Fi network, respectively; And a connection manager unit for activating or deactivating communication modules included in the wireless communication unit, respectively. According to the present invention, there is an advantage in that the appropriateness of billing for mobile terminal users and efficient network operation for telecommunication service providers.

WCDMA, Wi-Fi, WIBRO

Description

Mobile terminal connected to Wi-Fi network and its method {Terminal Connected to Wi-Fi Network and Method of Connection}

The present invention relates to a mobile terminal, and more particularly, to a mobile terminal connected to a Wi-Fi network and a method thereof.

With the recent development of technology, mobile convergence technology has emerged and various DBDM (Dual Band Dual Mode) terminals have been released. Among the DBDM terminals, various terminals capable of selectively connecting to heterogeneous networks including WCDMA networks and WIBRO networks are being released.

Recently, the technology for smartphones has a feature of connecting to a WCDMA network and a Wi-Fi network, and is proceeding to include a function to connect to a WIBRO network.

WIBRO networks and Wi-Fi networks have a common technology base for data services, but they differ in terms of charging and efficiency of services.

According to the related art, when the mobile terminal is connected to both the WIBRO network and the Wi-Fi network, there is a problem that an excessive fee may be applied to the mobile terminal user.

In addition, according to the related art, a mobile communication service provider needs a method in which a mobile terminal is selectively connected to a WIBRO network and a Wi-Fi network for data distribution and efficient operation.

An object of the present invention is to propose a mobile terminal connected to a Wi-Fi network and a method thereof, which promotes the appropriateness of billing for a mobile terminal user and efficient network operation for a communication service provider.

Another object of the present invention is to propose a mobile terminal and a method for connecting to a Wi-Fi network selectively using a WIBRO network and a Wi-Fi network for packet-based data services.

According to an aspect of the present invention, a mobile terminal connected to a Wi-Fi network, the display unit; A memory unit including mobile communication subscriber authentication information (IMSI); An input unit for receiving a Wi-Fi network connection request or disconnection request from a user; A wireless communication unit including a WCDMA communication module, a WIBRO communication module, and a Wi-Fi communication module for transmitting and receiving data by connecting to a WCDMA network, a WIBRO network, and a Wi-Fi network, respectively; And an access manager unit for activating or deactivating communication modules included in the wireless communication unit, respectively, wherein the access manager unit EAP-AKA (Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement) when activating the Wi-Fi communication module. There is provided a mobile terminal connected to a Wi-Fi network, characterized in that for controlling the Wi-Fi communication module using an authentication protocol.

According to another aspect of the present invention, a method of connecting a mobile terminal to a Wi-Fi network, comprising: (a) an EAP- transmitting an EAPOL start message to an access point and requesting subscriber ID information for subscriber authentication; Receiving a Request (Identity) message; (b) transmitting an EAP-Response (NAI) message including a Network Access Identifier (NAI) generated by extracting mobile subscriber identity information (IMSI) from the memory space of the mobile station to the base station apparatus; step; (c) receiving an EAP-Request (AKA-Challenge) message requesting AKA (Authentication and key Agreement) authentication received from the base station apparatus, performing AKA (Authentication and key Agreement) authentication, and responding to the EAP-Response. Transmitting to the base station apparatus in an (AKA-Challenge) message; (d) whether the base station apparatus to which the mobile terminal is connected is an allowed base station apparatus that is allowed according to the service subscribed to by the mobile terminal user by using the service control information included in the EAP-Request (Notification) message received from the base station apparatus; Determining whether or not; And (e) if the base station apparatus to which the mobile terminal is connected is not the allowable base station apparatus, outputting an indication and releasing a connection with the base station apparatus. A method is provided.

According to still another aspect of the present invention, a WIBRO communication module and a Wi-Fi communication module for transmitting and receiving data by connecting to a WIBRO network and a Wi-Fi network, respectively, the WIBRO communication module and the Wi-Fi communication module, respectively Claims [1] A method of connecting a mobile terminal to a Wi-Fi network, comprising: (a) receiving a connection request for the Wi-Fi network; (b) determining, by the connection manager, whether the WIBRO communication module is turned on; (c) if the state of the WIBRO communication module is active, requesting reconfirmation by displaying a predetermined message on the terminal; And (d) deactivating the WIBRO communication module and activating the Wi-Fi communication module when a response according to the Wi-Fi network connection request is received from the mobile terminal user according to the reconfirmation request. A method of connecting to a Wi-Fi network is provided.

A terminal and a method connected to a Wi-Fi network according to the present invention have the advantage of adequacy of billing for a mobile terminal user and efficient network operation for a communication service provider.

In addition, there is an advantage that can selectively use the WIBRO network and Wi-Fi network for packet-based data services.

BRIEF DESCRIPTION OF THE DRAWINGS The present invention is capable of various modifications and various embodiments, and specific embodiments are illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all transformations, equivalents, and substitutes included in the spirit and scope of the present invention. In the following description of the present invention, if it is determined that the detailed description of the related known technology may obscure the gist of the present invention, the detailed description thereof will be omitted.

The terms first, second, etc. may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, the same reference numerals will be used for the same means regardless of the reference numerals in order to facilitate the overall understanding.

1 is a block diagram illustrating a configuration of a mobile terminal according to an embodiment of the present invention.

Prior to the detailed description of the drawings, it is intended to clarify that the division of the components in the present specification is only divided by the main function of each component. That is, two or more components to be described below may be combined into one component, or one component may be provided divided into two or more for each function. Each of the components to be described below may additionally perform some or all of the functions of other components in addition to the main functions of the components, and some of the main functions of each of the components are different. Of course, it may be carried out exclusively by. Therefore, the presence or absence of each component described through this specification should be interpreted functionally, for this reason the configuration of the mobile terminal 100 according to an embodiment of the present invention is the limit to achieve the object of the present invention. Clearly, it may be different from FIG. 1.

The mobile terminal includes an output unit 110, an A / V input unit 120, an input unit 130, a sensing unit 132, a memory unit 134, a power supply unit 136, and an interface unit 138. It may include one or more of the controller 140, the connection manager 110 and the wireless communication unit 160.

The components shown in FIG. 1 are only examples. Accordingly, the mobile terminal according to the embodiment of the present invention may have more components or fewer components depending on the function to perform.

Referring to FIG. 1, the output unit 110 may generate an output related to sight, hearing, or touch. The output unit 110 may include one or more of the display unit 111, the sound output module 112, the alarm module 113, and the haptic module 114.

The display unit 111 may display image data. In addition, when a recent touch panel is provided, an input by a touch may be received from a user.

The sound output module 112 may output a sound signal related to a function (eg, a call signal reception sound, a message reception sound, etc.) performed in the mobile terminal 100.

The alarm module 113 may output a signal for notifying occurrence of an event of the mobile terminal 100.

The haptic module 114 may output various tactile effects that a user can feel.

The A / V input unit 120 is for inputting an audio signal or a video signal, and may include a camera module 121 and / or a microphone module 122.

The input unit 130 receives an input for controlling the operation of the terminal from the user.

The sensing unit 132 detects a current state of the mobile terminal 100, such as an open / closed state of the mobile terminal 100, a location of the mobile terminal 100, presence or absence of a user contact, orientation of the mobile terminal, acceleration / deceleration of the mobile terminal, and the like. To generate a sensing signal for controlling the operation of the mobile terminal 100.

The memory unit 134 may store a program for the operation of the controller 140 and may temporarily store input / output data (for example, a phone book, a message, a still image, a video, etc.).

The memory unit 134 may include a universal IC card (UICC) or a user subscriber identity module (USIM). Here, the UICC or USIM may include one or more of mobile subscriber identity information (IMSI), mobile terminal user ID, and mobile terminal information.

The power supply unit 136 may receive external power and internal power under the control of the control unit 140 to supply power for operation of each component.

The interface unit 138 may serve as a path with all external devices connected to the mobile terminal 100. The interface unit 190 may receive data from an external device or receive power and transfer the data to each component inside the mobile terminal 100. In addition, the interface unit 190 may transmit data in the mobile terminal 100 to an external device.

The controller 140 may typically control the overall operation of the mobile terminal. For example, perform related control and processing for voice calls, data communications, video calls, and the like. The controller 140 may include a multimedia module 141 for playing multimedia.

The wireless communication unit 160 may include one or more modules that enable wireless communication between the mobile terminal 100 and the wireless communication system or between a network located between the mobile terminal 100 and the mobile terminal 100.

According to an embodiment of the present invention, one or more of a WCDMA communication module 161, a Wi-Fi communication module 162 and a WIBRO communication module 163 connected to a WCDMA network, a Wi-Fi network, and a WIBRO network may be included. Can be.

Here, the process of connecting each communication module (ie, 161, 162, 163) to the corresponding network is a well-known technique, and thus a general description thereof will obscure the gist of the present invention, and thus the detailed description thereof will be omitted.

In addition, although the high-speed downlink packet transmission (HSDPA) module is not shown in FIG. 1, it may be included in the wireless communication unit 160 in an environment to which the present invention is applied, and the corresponding module is connected to the connection manager unit 150 (described later). It can be included is apparent to those skilled in the art in view of the technical spirit of the present invention.

The connection manager 150 may turn on or turn off each of the communication modules included in the wireless communication unit 160.

In the present specification, the connection manager 150 may activate / deactivate the communication module, which may mean to enable / disable power to hardware in which the module is implemented. Alternatively, the corresponding registry or identifier may be changed while maintaining power. To include or imply that the function may or may not be performed.

In FIG. 1, modules (eg, 151, 152, 153, 161, 162, and 163) according to respective networks of the wireless communication unit 160 and the connection manager unit 150 may be separately provided. However, embodiments of the present invention are not limited thereto and may be variously implemented.

For example, the WCDMA communication module 161 and the WCDMA access manager module 151 may be implemented as one, and the communication module and the access manager module for each network may be implemented as one.

For example, one or more modules (eg, 151, 152, 153) included in the connection manager unit 150 may be implemented as components of the controller 140.

According to an embodiment of the present invention, when the connection manager 150 receives a connection request for a heterogeneous network from a user of the mobile terminal 100, the connection manager 150 may derive a communication module that is currently activated. When the service characteristics of the first network according to the currently activated communication module and the second network according to the connection request overlap, the connection manager 150 may display a message for requesting the user to reconfirm. In addition, when re-confirming the connection request to the second network, the connection manager 150 may deactivate the communication module according to the first network and activate the communication module according to the second network.

This point will be described later in detail with reference to FIG. 3.

In addition, according to an embodiment of the present invention, the access manager 150 uses an EAP-AKA (Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement) authentication protocol when the mobile terminal 100 is connected to a Wi-Fi network. To control the Wi-Fi communication module. This point will be described later in detail with reference to FIG. 2.

So far, the configuration of the mobile terminal according to the embodiment of the present invention has been described with reference to FIG. 1.

2 is a flowchart illustrating a process of applying the EAP-AKA authentication protocol in the process of connecting the mobile terminal 100 to the Wi-Fi network according to an embodiment of the present invention.

Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA) applies AKA (Authentication and Key Agreement) formula proposed by 3GPP to Extensible Authentication Protocol (EAP) authentication protocol to seamlessly connect with 3GPP and WLAN. 3GPP proposes EAP-AKA as a secure authentication protocol. Here, the user authentication information is securely stored, managed, and processed in a memory such as USIM / UICC, not a mobile terminal.

After that, referring to Figure 2 in the mobile terminal 100 according to an embodiment of the present invention to explain the process of connecting to the Wi-Fi network using EAP-AKA, for the wireless access procedure known in IEE 802.1X The description is omitted to the extent that it does not detract from the gist of the present invention. For example, Radius-Access-Request message that can be transmitted and received between the authentication server (for example, AAA) and the base station (AP). Descriptions of the Radius-Access-Challenge and Radius-Access-Accept messages are well known in the IEE 802.1X, and thus detailed descriptions thereof will be omitted.

Referring to FIG. 2, the memory unit 134 may include a Universal IC Card (UICC) or a User Subscriber Identity Module (USIM) as described above with reference to FIG. 1. Make it clear.

The base station apparatus (AP) 290 is described on the assumption that the mobile terminal 100 is a base station apparatus (AP) 290 primarily searched for connection to a Wi-Fi network, but is not limited thereto. For example, the base station apparatus (AP) 290 may be a base station apparatus 290 to which the mobile terminal 100 is previously connected.

Hereinafter, in using the term "connection" or "connection" to the base station apparatus (AP) is divided as follows.

"Connect" means that the base station apparatus may be used according to the service subscribed to by the mobile terminal user, and thus, the mobile terminal 100 transmits and receives data to and from the base station apparatus in the process of using the Wi-Fi network.

"Access" means that the mobile terminal 100 transmits / receives data with the base station apparatus in the process of receiving subscriber authentication or other EAP-AKA authentication in order to "connect" to the Wi-Fi network.

Although FIG. 2 mainly illustrates the connection manager unit 150, the connection manager unit 150 may control the Wi-Fi communication module to perform a corresponding process.

Although not shown in FIG. 2, the mobile terminal 100 receives a connection request from the user to the Wi-Fi network, or when the base station apparatus 290 is searched within a certain distance according to a specified setting. It is apparent to those skilled in the art in view of the technical spirit of the present invention that the process can be performed.

In step 200, the access manager 150 controls the Wi-Fi communication module 162 to transmit an EAPOL-Start message to the base station apparatus 290, and in step 201, EAP_Request (Identity) requesting a subscriber ID for subscriber authentication. You can receive a message.

Subsequently, in step 204, the access manager 150 may request mobile communication subscriber authentication information (IMSI) from the USIM 134 of the mobile terminal and extract the information in step 206.

Although not shown in FIG. 2, in step 204, the connection manager 150 may determine whether the USIM is present in the mobile terminal 100. If there is no USIM, the process may be terminated after step 204 after outputting a guide message to retry after inserting the USIM.

Subsequently, in step 208, the access manager 150 may generate a network access identifier (NAI) using the extracted mobile subscriber identity information (IMSI). The EAP-Response (NAI) including the generated network access identifier (NAI) may be transmitted to the base station apparatus. Accordingly, according to an embodiment of the present invention, roaming and billing of subscribers are supported by using a network access identifier (NAI) rather than subscriber identity information (IMSI), and distributed authentication is performed using the location of the subscriber's home authentication server. There is an advantage that it can.

Subsequently, in step 220, the access manager 150 may receive an EAP-Request (AKA-Challenge) message requesting authentication for the AKA from the base station apparatus during the EAP-AKA authentication protocol process.

Subsequently, in step 212 and 214, the access manager 150 may perform AKA authentication and transmit the result to the base station apparatus (AP) 290 in step 216.

In operation 218, the access manager 218 may receive an EAP-Request (Notification) message.

According to an embodiment of the present invention, the EAP-Request (Notification) message is a guide message. It may include one or more of a delimiter and service control information.

The guide message may include message information to be displayed to the mobile terminal user.

The delimiter is a value for distinguishing a guide message from other information (ie, service control information and a hash value), and is a value for distinguishing an EAP-Request (Notification) message known from the existing IEE 802.1X.

The service control information includes the allowable base station apparatus information (for example, BSSID value of the base station apparatus AP), voice service information, data service information, and integrity review that allow the connection of the mobile terminal according to the service subscribed to by the mobile terminal user. It may include one or more of the hash value for.

A guide message, a separator, and a service control information included in an EAP-Request (Notification) message according to an embodiment of the present invention will be described in detail later with reference to FIGS. 5 and 6.

In operation 220, the access manager 150 may extract service control information from an EAP-Request (Notification) message. The base station apparatus 290 to which the mobile terminal 100 is connected may be included in the allowed base station apparatus using the allowable base station apparatus information among the service control information.

If the base station apparatus 290 to which the mobile terminal 100 is connected is not included in the allowable base station apparatus, in step 230, the connection manager unit 150 displays the base station apparatus (AP) on the display unit 111 of the mobile terminal 100. A message that cannot be connected to) 290 may be output and the process may be terminated later.

Although it has been described that the connection manager 150 controls the display 111 to output a message in step 230, another component (for example, the controller 140) may perform the corresponding function. It is apparent to those skilled in the art in view of the technical spirit of.

If the base station apparatus 290 to which the mobile terminal 100 is connected is included in the allowed base station apparatus, in step 222, an EAP-Response (Notification) message is transmitted to the base station apparatus 290, and in step 224, an EAP-Success message is transmitted. Can be received.

Up to now, the embodiment of the present invention to which the EAP-AKA authentication protocol is applied in the process of connecting the mobile terminal 100 to the Wi-Fi network centering on the connection manager unit 150 has been described with reference to FIG. 2.

Therefore, according to the embodiment of the present invention, there is an advantage that the authentication for connecting to the Wi-Fi network can be raised to the level of WCDMA.

3 is a flowchart illustrating a process of connecting to a Wi-Fi network in a situation where the mobile terminal 100 is connected to a WIBRO network according to an embodiment of the present invention.

Hereinafter, descriptions overlapping with parts described with reference to FIG. 2 will be omitted to clarify the gist of the present invention to be described with reference to FIG. 3.

Referring to FIG. In step 300, the mobile terminal 100 may be connected to a WIBRO network. Although FIG. 3 illustrates that the mobile terminal is connected only to the WIBRO network, it is apparent to those skilled in the art in view of the technical spirit of the present invention that the mobile terminal may also be connected to the WCDMA network for voice communication.

Subsequently, in step 302, the mobile terminal 100 may input a connection request for a Wi-Fi network from a user.

As described above, since WIBRO and Wi-Fi networks are based on packet-based data services, excessive charges may be incurred for mobile subscribers and inefficient for network service providers. to be.

Therefore, according to the embodiment of the present invention, when the mobile terminal 100 is connected to the Wi-Fi network, it is intended to increase efficiency in terms of charge and network operation by disconnecting the existing WIBRO network connection.

Subsequently, in step 304, the mobile terminal 100 according to an embodiment of the present invention may output a reconfirmation request message according to the Wi-Fi network connection request.

For example, the mobile terminal 100 may output a guide message to the display unit 111, "Attempt to connect to the wireless LAN. The data connection of all current services is terminated. Do you want to continue?"

As described above with reference to FIGS. 1 and 2, the subject in step 304 may be performed by the connection manager 150, and the controller 140 controls the display unit 111 according to an environment to which the present invention is applied. It is explained that the reconfirmation guide message and the reconfirmation request can be made.

Subsequently, in step 306, the user of the mobile terminal 100 may re-confirm the connection to the Wi-Fi network according to the guide message displayed on the display 111.

If, in step 306, the user of the mobile terminal 100 does not want to connect to the Wi-Fi network according to the guide message, the mobile terminal 100 may maintain the WIBRO network connection in step 308. In more detail, the connection manager 150 may maintain activation of the WIBRO communication module 163.

If, in step 306, the user of the mobile terminal 100 wants to connect to the Wi-Fi network according to the guide message, in step 310, the user of the mobile terminal 100 may make a predetermined input.

Subsequently, in step 312, the mobile terminal 100 may deactivate the WIBRO communication module to release the WIBRO network connection of the mobile terminal 100 and activate the Wi-Fi communication module in step 314 to connect to the Wi-Fi network. In this case, as described above with reference to FIG. 2, the mobile terminal 100 may connect to the base station apparatus (AP) 290 using the EAP-AKA authentication protocol.

Although not shown in FIG. 3, if the user of the mobile terminal 100 is not a mobile communication service subscriber based on the Wi-Fi network, steps 220 and 230 of FIG. 2 may be performed. In this case, it will be apparent to those skilled in the art in view of the technical spirit of the present invention that steps 312 and 314 of FIG. 3 are not performed and the mobile terminal 100 can continue to be connected to the WIBRO network.

Up to now, the process of connecting to the Wi-Fi network in the situation that the mobile terminal 100 is connected to the WIBRO network according to an embodiment of the present invention with reference to FIG.

In FIG. 3, the mobile terminal 100 is described as an embodiment of the present invention with the WIBRO network disconnected and connected to a Wi-Fi network, but the present invention is not limited thereto. It is obvious to those skilled in the art in view of the spirit.

For example, in step 300, the mobile terminal 100 may be a situation in which a WCDMA network, an HSDPA network, and a WIBRO network are connected. In this case, HSDPA network and WIBRO network are mainly used for data service and overlap with basic characteristics of Wi-Fi network. Accordingly, according to another embodiment of the present invention, in step 312, the HSDPA communication module (described above in FIG. 1 may be provided with the HSDPA network communication module and the connection manager unit) and the WIBRO network communication module are deactivated, and the WCDMA network is voiced. The active state can be maintained for communication. In operation 314, the Wi-Fi communication module may be activated. Accordingly, according to an embodiment of the present invention, maintaining the connection to the WCDMA network for the voice network, limiting the data service network to the Wi-Fi network and releasing the connection to the other network to ensure proper billing and network operation. Efficiency can be achieved.

4 is a diagram illustrating a process in which a mobile terminal 100 is released from a Wi-Fi network and connected to a WIBRO network according to an embodiment of the present invention.

Hereinafter, descriptions overlapping with parts described with reference to FIGS. 1 to 3 will be omitted to clarify the gist of the present invention to be described with reference to FIG. 4.

Referring to FIG. 4. In step 402, the mobile terminal 100 may be connected to a Wi-Fi network. Although FIG. 4 illustrates that the mobile terminal is only connected to the Wi-Fi network, it may be connected to the WCDMA network for voice communication. It will be apparent to those skilled in the art in view of the technical idea of the present invention.

Subsequently, in step 404, the mobile terminal 100 may leave the area of the base station apparatus (AP) 290. In this case, in step 410, the mobile terminal 100 may display a guide message "Wireless LAN connection is terminated" on the display unit 111. In operation 412 and operation 413, the mobile terminal 100 may activate the Wi-Fi communication module to connect to the Wi-Fi network and disconnect the connection to the WIBRO network.

For step 412 and step 413, the connection manager 150 in FIG. 1 deactivates and activates the Wi-Fi communication module 162 and the WIBRO communication module 163, respectively, to connect and disconnect each network. Explained.

Even if the mobile terminal 100 does not leave the area of the base station apparatus (AP) 290, in step 420, the WIBRO network connection request of the mobile terminal 100 may be input for a predetermined purpose. In this case, in step 422, the mobile terminal 100 may output a message indicating that the connection to the Wi-Fi network is terminated, such as "the wireless LAN connection is terminated". In operation 424 and operation 426, the mobile terminal 100 may deactivate the Wi-Fi communication module to release the connection to the Wi-Fi network and activate the WIBRO communication module to connect to the WIBRO network.

So far, the mobile terminal 100 according to the embodiment of the present invention has been described with reference to FIG. 4 in which the connection to the Wi-Fi network is released and connected to the WIBRO network.

As described above with reference to FIG. 3, FIG. 4 is merely an example of the WIBRO network and the Wi-Fi network as an embodiment of the present invention, and the present invention is not limited thereto.

For example, after the mobile terminal 100 is released from the Wi-Fi network, the mobile terminal 100 may be connected to another network other than the WIBRO network. More specifically, although not shown in FIG. 3 in steps 413 and 426, the mobile terminal 100 may be connected to an HDSPA network or the like.

5 and 6 are diagrams for explaining an EAP-Request (Notification) according to an embodiment of the present invention.

In step 218 of FIG. 2, the access manager 218 receives the EAP-Request (Notification), extracts the service control information included in the EAP-Request (Notification) in step 220, and accesses the mobile terminal 100. It has been described that the base station apparatus 290 can be determined whether it is included in the allowed base station apparatus.

According to an embodiment of the present invention, the above-described guide message, identifier and service control information may be included in the Type-data field of the EAP-Request (Notification). However, this is for explaining an embodiment of the present invention, it is apparent to those skilled in the art in view of the technical spirit of the present invention that various fields of EAP-Request (Notification) can be used according to an embodiment of the present invention.

Hereinafter, in order to facilitate the understanding and explanation of the embodiments of the present invention, the following description will focus on the Type-data field of EAP-Request (Notification).

The Type-data field of the EAP-Request (Notification) according to an embodiment of the present invention may be configured as shown in Table 1 below.

Table 1 <Type-data field of EAP-Request (Notification)>

order Element Name Length
in Octets Explanation One Guide message Variable User guide message in UTF-8 format. If this element is included in EAP-Request (Notification), the connection manager outputs the contents to the mobile terminal display so that the user can check the guide message. 2 Separator One 0x00 3 Service control information Variable BASE64 encoded ASCII string value of all control information tag length values

Here, according to the specification of EAP-Request (Notification), the total length of the Type-data field may not exceed 1015 octets including service control information.

5 illustrates a format of the highest TLV according to an embodiment of the present invention.

Type may indicate the corresponding highest TLV data type and Length may indicate the length of the value field in byte units. According to the embodiment of the present invention, according to the definition of each highest TLV, the Value field may be composed of a combination of a plurality of sub-TLVs.

6 illustrates a format of a sub TLV (Sub-TLV) according to an embodiment of the present invention. Referring to FIG. 6, a type may indicate a corresponding sub-TLV data type and a length may indicate a length of a value field in byte units.

5 and 6 are only examples for describing the highest TLV and the sub TLV according to the embodiment of the present invention, and various modifications and changes may be applied to those skilled in the art in view of the technical spirit of the present invention.

Hereinafter, the service control information will be described in detail, for example.

For example, suppose that the Nespot service is used as an example of a Wi-Fi service.

According to an embodiment of the present invention, as an example of the highest TLV, the "Nespot_Service_Information TLV" may be configured as shown in Table 2 below.

<Table 2> <Example of Nespot_Service_Information TLV According to Embodiment of the Present Invention>

TLV name Nespot_Service_Information TLV TLV level Top level TLV Type 1000 Length in Octets variable Description Consists of service control information for Nespot service. The order of the following sub-TLVs is not guaranteed. Elements
(Sub-TLVs) TLV name Description M / O Occurrence FMC-Data Whether the user subscribes to the FMC Data Service M One FMC-Voice Whether the user subscribes to the FMC Voice Service M One BSSID BSSID value of the base station device to which the user is allowed to connect M 0 to n NMAC Hash value for reviewing the integrity of the data being passed M One

The FMC-Data information according to an embodiment of the present invention includes information on whether a user subscribes to a data service among nespot services, and can be exemplified in [Table 3] below.

[Table 3] <Example of FMC-Data information according to an embodiment of the present invention>

TLV name FMC-Data TLV level Sub TLV Type One Length in octets One Vlaue "1" = FMC data service only available in specific base station (s)
"2" = FMC data service available to all base station (s) Description Contains information about the availability of FMC data services

The FMC-Voice information according to an embodiment of the present invention includes information on whether a user subscribes to a voice service among nespot services, and can be illustrated by the following [Table 4].

[Table 4] <Example of FMC-Voice information according to an embodiment of the present invention>

TLV name FMC-Voice TLV level Sub TLV Type 2 Length in octets One Vlaue "0" = FMC voice service unavailable
"1" = FMC voice service only in specific base station (s)
"2" = FMC voice service available to all base station (s) Description Contains information about the availability of FMC voice services

The information on the allowable base station apparatus according to the embodiment of the present invention includes information on the allowable base station apparatus that the mobile terminal can connect to use the Nespot service, which can be illustrated by the following [Table 5].

<Table 5> <Example of BSSID Information According to an Embodiment of the Present Invention>

TLV name BSSID TLV level Sub TLV Type 3 Length in octets One Vlaue BSSID (can be displayed as "AA-BB-CC-DD-EE-FF", for example) Description BSSID value of the base station equipment to which the mobile terminal or mobile terminal user can connect.
The access manager may synchronize the home profile with the BSSID TLV (s) information received from the authentication server (AAA).
According to an embodiment of the present invention, if none of the BSSID TLVs are included in the service control information received from the authentication server, the access manager may delete all previously created home profiles.

NMAC information according to an embodiment of the present invention can be exemplified by Table 6 below as a hash value for examining the integrity of data.

[Table 6] <Example of NMAC information according to an embodiment of the present invention>

TLV name NMAC TLV level Sub TLV Type 255 Length in octets 20 Vlaue 20 Octet NMAC values can be calculated using the MSK values
NMAC = -HMAC-SHA-1 (MSK, Nespot_Service_Information TLV)

So far, with reference to FIGS. 5 and 6, and Tables 1 to 6, descriptions have been made about guide messages, delimiters, and service control information that may be included in an EAP-Request (Notification) according to an embodiment of the present invention. .

In addition, service control information has been described in detail with reference to [Table 1] to [Table 6] in order to understand the present invention.

However, FIG. 5 and FIG. 6, [Table 1] to [Table 6] are just one embodiment of the present invention, and various modifications can be made within the technical idea of the present invention to those skilled in the art. Self-explanatory

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the invention as defined in the appended claims. It will be understood that the invention may be varied and varied without departing from the scope of the invention.

1 is a block diagram illustrating a configuration of a mobile terminal according to an embodiment of the present invention.

2 is a flowchart illustrating a process in which an EAP-AKA authentication protocol is applied in a process of connecting a mobile terminal to a Wi-Fi network according to an embodiment of the present invention.

3 is a flowchart illustrating a process of connecting to a Wi-Fi network in a situation where a mobile terminal is connected to a WIBRO network according to an embodiment of the present invention.

4 is a view illustrating a process in which a mobile terminal 100 is released from a Wi-Fi network and connected to a WIBRO network according to an embodiment of the present invention.

5 and 6 are diagrams for explaining EAP-Request (Notification) according to an embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

100: mobile terminal 110: output unit

120: A / V input unit 130: input unit

132: sensing unit 134: memory unit

136: power supply unit 138: interface unit

140: control unit 150: connection manager unit

160: wireless communication unit

Claims (9)

In the mobile terminal connected to the Wi-Fi network, A display unit; A memory unit including mobile communication subscriber authentication information (IMSI); An input unit for receiving a Wi-Fi network connection request or disconnection request from a user; A wireless communication unit including a WCDMA communication module, a WIBRO communication module, and a Wi-Fi communication module for transmitting and receiving data by connecting to a WCDMA network, a WIBRO network, and a Wi-Fi network, respectively; And It includes a connection manager for activating or deactivating each communication module included in the wireless communication unit, When the Wi-Fi communication module is activated, the connection manager controls the Wi-Fi communication module using an EAP-AKA (Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement) authentication protocol, and the mobile terminal accesses the Wi-Fi communication module. Determining whether it is possible to connect to a Wi-Fi network using the first base station apparatus using the service control information included in the EAP-Request (Notification) message received from the first base station apparatus, When the Wi-Fi network connection request is input through the input unit while the mobile terminal is connected to the WIBRO network, the connection manager displays a predetermined guide message requesting reconfirmation on the display unit. Mobile terminal connected to the network. The method of claim 1, The service control information may include at least one of an allowable base station device information, voice service information, data service information, and a hash value for integrity review according to a service subscribed to by the mobile terminal user. Mobile terminal connected to the Wi-Fi network. delete The method of claim 1, The connection manager unit When the Wi-Fi network connection request is input through the input unit according to a predetermined guide message requesting reconfirmation, the WiIB communication module is deactivated and the Wi-Fi network communication module is activated. -Mobile terminal connected to the WiFi network. In the method that the mobile terminal is connected to the Wi-Fi network, (a) transmitting an EAPOL start message to an access point and receiving an EAP-Request (Identity) message requesting subscriber ID information for subscriber authentication; (b) transmitting an EAP-Response (NAI) message including a Network Access Identifier (NAI) generated by extracting mobile subscriber identity information (IMSI) from the memory space of the mobile station to the base station apparatus; step; (c) receiving an EAP-Request (AKA-Challenge) message requesting AKA (Authentication and key Agreement) authentication received from the base station apparatus, performing AKA (Authentication and key Agreement) authentication, and responding to the EAP-Response. Transmitting to the base station apparatus in an (AKA-Challenge) message; (d) whether the base station apparatus to which the mobile terminal is connected is an allowed base station apparatus that is allowed according to the service subscribed to by the mobile terminal user by using the service control information included in the EAP-Request (Notification) message received from the base station apparatus; Determining whether or not; And (e) if the base station apparatus to which the mobile terminal is connected is not the allowable base station apparatus, outputting a predetermined message and releasing a connection with the base station apparatus, wherein the mobile terminal is connected to a Wi-Fi network. Way. The method of claim 5, The service control information may include at least one of an allowable base station device information, voice service information, data service information, and a hash value for integrity review that allow the connection of the mobile terminal according to a service subscribed to by the mobile terminal user. Mobile terminal connected to the Wi-Fi network. The method of claim 5, Before step (a) above Connecting the mobile terminal to a WIBRO network; Receiving a Wi-Fi network connection request; And And displaying a reconfirmation request message according to the Wi-Fi network connection request. It includes a WIBRO communication module and a Wi-Fi communication module for transmitting and receiving data by connecting to a WIBRO network and a Wi-Fi network, respectively, and a connection manager for activating or deactivating the WIBRO communication module and the Wi-Fi communication module, respectively. In the method that the mobile terminal is connected to the Wi-Fi network, (a) receiving a connection request for the Wi-Fi network; (b) the connection manager determining whether the WIBRO communication module is turned on; (c) if the state of the WIBRO communication module is active, requesting reconfirmation by displaying a predetermined message on the terminal; And (d) deactivating the WIBRO communication module and activating the Wi-Fi communication module when a response according to the Wi-Fi network connection request is received from the mobile terminal user according to the reconfirmation request; -How to connect to Fi network. The method of claim 8, The step (d) further comprises the step of the access manager controls the Wi-Fi communication module using the EAP-AKA (Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement) authentication protocol. How the terminal is connected to the Wi-Fi network.

Images