KR100587158B1 - Automatic Authentication Method and Device in Wireless Internet - Google Patents

Abstract

A method and apparatus for automatic authentication in a wireless Internet are disclosed. The present invention provides a method of controlling a mobile terminal, comprising the steps of: i) connecting a mobile terminal to a proxy server for accessing a wireless Internet through a wireless communication network; Ii) extracting customer information including subscriber information and terminal information from the information provided to the proxy server by the mobile terminal and transmitting the extracted customer information to an authentication server; Iii) determining whether the customer information is stored in the authentication server; And iv) if the customer information is not stored as a result of the determination, storing the customer information in a predetermined memory after the authentication of the customer information is completed.

Integrated management, wireless internet, customer information, subscriber information, terminal information

Description

TECHNICAL FIELD [0001] The present invention relates to a method and apparatus for automatic authentication in a wireless Internet,

FIG. 1 illustrates a system for integrated management of a wired and wireless Internet, to which an embodiment of the present invention is applied.

FIG. 2 illustrates an automatic authentication apparatus in a wireless Internet connected to a mobile terminal according to an embodiment of the present invention.

3 is a flowchart illustrating an automatic authentication method in a wireless Internet connected to a mobile terminal according to an exemplary embodiment of the present invention.

Description of the Related Art

100:

120: communication network

130: Swap gateway

152: Content providing device

200: Integrated management device

300: Central management device

310: Content provider access device

330: Transmission device

332-1: Proxy Server

332-2: Authentication server

332-3: Encryption module

350: Interface device

500: Subscriber management device

The present invention relates generally to a wireless network, and more particularly, to a method and apparatus for automatic authentication in a wireless Internet to provide seamless services to a mobile terminal connected to a portal platform for integrated management of a wired and wireless Internet network.

The Internet is a common method of accessing by using a wired network, and is done on an open network, which is a principle free of charge. In the case of using paid content, an exception may be made by recognizing the ID on the wired Internet and imposing a charge.

In the case of Internet communication using a wire, HTTP (Hyper Text Transfer Protocol) uses a fixed network cable to communicate between the Internet server and the client, and the user has a fixed IP (Internet Protocol) address . Accordingly, the Internet server accesses the Internet server to identify an IP of a user using an Internet contents service, and performs an authentication process of verifying a user name and a password, (session) and cookie (cookie).

The cookie is a temporary file containing information to be generated when a customer accesses a specific homepage. The size of the temporary file is as small as 4 Kb or less. Cookies were originally created to help Internet users access their homepages. When you visit a site for the first time, a cookie is created that records your ID and password and you can quickly connect to the site the next time you connect.

Such a cookie is automatically generated and updated by a web browser connected to the Internet, and the cookie is transmitted to the content providing device.

However, a mobile terminal accessing the wireless Internet has no ability to store cookies, and wireless Internet access using cookies is impossible.

Also, when information on a mobile terminal connected to a portal platform that manages a wired Internet and a wireless Internet is provided to a contents provider (CP) or an external server, a customer There is a growing need for encryption of information.

The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a method and apparatus for automatic authentication in a wireless Internet for automatically providing authentication for a mobile terminal connected to a wireless Internet.

According to a first aspect of the present invention, there is provided an automatic authentication method in a wireless Internet,

I) connecting the mobile terminal to a proxy server for accessing the wireless Internet through a wireless communication network;

Ii) extracting customer information including subscriber information and terminal information from the information provided to the proxy server by the mobile terminal and transmitting the extracted customer information to an authentication server;

Iii) determining whether the customer information is stored in the authentication server; And

And iv) if the customer information is not stored as a result of the determination, storing the customer information in a predetermined memory after the authentication of the customer information is completed.

According to a second aspect of the present invention, there is provided an apparatus for automatically generating a cookie in a wireless Internet,

A proxy server for extracting and transmitting customer information including subscriber information and terminal information among information received from a mobile terminal connected through a wireless communication network; And

And an authentication server for receiving the customer information to determine whether or not to authenticate and storing the customer information for a predetermined period of time when the authentication is performed and the authentication is completed.

Hereinafter, preferred embodiments of the present invention will be described with reference to the accompanying drawings.

FIG. 1 illustrates a system for integrated management of a wired and wireless Internet, to which an embodiment of the present invention is applied.

1, the mobile communication system includes a communication network 120 and an integrated management apparatus 300, and connects the subscriber terminal 100 to the content providing apparatus 150 and the external server 170.

The subscriber terminal 100 includes a mobile phone capable of wireless communication, a mobile communication terminal including a PDA, and a computer capable of wired / wireless communication.

In one application, an external server 170 is included in the mobile communication system.

The content provider of the present invention is a company that provides a service including contents and application programs composed of various data to the subscriber terminal 100 through the mobile communication system.

The integrated management apparatus 300 refers to a portal platform for integrated management of a wired Internet and a mobile Internet. The integrated management device 300 has an open structure including a content provider access device, a central management device, a transmission device, and an interface device, and has flexibility and modularity that can be implemented together with other solutions. Accordingly, the integrated management apparatus 300 supports HP-UX, Sun Solaris, WebLogic, Oracle9iAS, and SunONE Web Server as multiple platforms.

In addition, the integrated management device 300 supports global regulations related to wireless business such as WAP (Wireless Application Protocol).

In addition, the integrated management apparatus 300 manages and manages the contents provider, the service and contents of the contents provider, and the menu of the subscriber, thereby enabling the service to be started sooner. In addition, the integrated management device 300 provides an authentication model based on the service-based subscription and the CP policy.

The content providing apparatus 150 receives an account from the integrated management apparatus 200 through the communication network 120 and registers a service to be provided to the subscriber terminal 100. At this time, the integrated management apparatus 200 performs the overall management necessary for the content providing apparatus 150 to provide the service to the subscriber station 100, that is, to provide the content.

FIG. 2 illustrates an automatic authentication apparatus in a wireless Internet connected to a mobile terminal according to an embodiment of the present invention.

2, the portal platform 200 includes a CP access framework 310, a core framework 300, a delivery framework 330, And an interface device (Interface Framework) 350.

The transmission device 330 includes a smart gateway (hereinafter referred to as a proxy server 332-1), a detection module (not shown), and an authentication server 332-3. do. When a mobile terminal capable of communicating through a mobile communication system of the subscriber terminal 100 accesses the wireless Internet through a WAP gateway 130, the mobile terminal is connected to the transmission apparatus 330.

The transmission device 330 connected to the mobile terminal senses the customer information of the mobile terminal in the detection module. The customer information includes subscriber information and terminal information of the mobile terminal.

Therefore, the proxy server 332-1 of the transmission apparatus 330 extracts the subscriber information and the terminal information of the mobile terminal from the client information, and transmits it to the authentication server 332-2.

One example of the subscriber information is a Mobile Identification Number (MIN), a Mobile Directory Number (MDN), or a Client ID defined in the OMA standard. An example of the terminal information is a URI defined in a Phone Type or an OMA standard.

The authentication server 332-2 determines whether the customer information is valid customer information, and stores the customer information temporarily in a predetermined memory if the customer is a valid customer as a result of the authentication. The time stored in the memory can be changed by the user.

Accordingly, when the received customer information is stored in the memory, the authentication server 332-2 skips authentication of the customer information. However, since the customer information is stored in the memory only for a certain period of time, the customer information of the mobile terminal which reconnects after the time set by the user is exceeded, must be authenticated again.

If the customer information stored in the authentication server 332-2 is not in the format defined in the OMA standard, the encryption module 332-3 performs encryption to prevent the leakage of customer information to the content providing apparatus 150 do. That is, the customer information is converted into a predetermined code using a plug-in method.

The operation state of the present invention configured as described above will be described.

3 is a flowchart illustrating an automatic authentication method in a wireless Internet connected to a mobile terminal according to an exemplary embodiment of the present invention.

The mobile terminal accesses the proxy server 332-1 through the communication network 120 to use the wireless Internet (S300).

The proxy server 332-1 receives the customer information transmitted from the mobile terminal, extracts subscriber information and terminal information from the customer information, and transmits the extracted information to the authentication server 332-2 (S310, S320).

The authentication server 332-2 determines whether the customer information is stored in a predetermined memory, and performs authentication of the customer information only when the customer information is not stored in the memory (S330, S340).

When the customer information is stored in the memory, it is determined that the user who has recently performed authentication has reconnected, so that the wireless Internet can be used without authentication.

Therefore, the customer information is automatically extinguished at a predetermined time after the customer information is stored in the memory (S370, S380, S390).

Also, the authentication server 332-2 determines whether the customer information conforms to the format defined in the OMA standard (S350).

The format defined in the OMA standard of the subscriber information is a client ID, and the format defined in the OMA standard of the terminal information is a URI. The format defined in the OMA standard is formed of a predetermined code, so that the subscriber information and the terminal information can be recognized only when there is a formula for solving the code.

As a result, even if the subscriber information and the terminal information according to the format defined in the OMA standard itself are provided to the external content providing apparatus 150, the client information is not leaked unnecessarily.

Accordingly, if the subscriber information and the terminal information conform to the format defined by the OMA standard, the customer information is stored as it is, and the customer information is converted into a predetermined code and stored only when the customer information does not conform to the format defined in the OMA standard S360).

As described above in detail, according to the automatic authentication method and apparatus of the wireless Internet of the present invention, the customer information of the mobile terminal authenticated on the wireless Internet can be maintained for a predetermined period of time, Can be reduced.

Also, it is advantageous in that unnecessary leakage of customer information can be prevented by encrypting the subscriber information and the terminal information, and transmitting the subscriber information and the terminal information to a content providing apparatus or an external web server which requires the information.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.

Claims (14)

I) connecting the mobile terminal to a proxy server for accessing the wireless Internet through a wireless communication network; Ii) extracting customer information including subscriber information and terminal information from the information provided to the proxy server by the mobile terminal and transmitting the extracted customer information to an authentication server; Iii) determining whether the customer information is stored in the authentication server; And And iv) if the customer information is not stored as a result of the determination, storing the customer information in a predetermined memory after the authentication of the customer information is completed. The method of claim 1, And v) if the customer information is stored in the authentication server as a result of the determination in step iii), omitting authentication for the customer information. 3. The method of claim 2, And vi) automatically deleting the customer information when a predetermined time has elapsed. 4. The method of claim 3, wherein the subscriber information is one of a MIN, an MDN, and a Client ID. The method as claimed in claim 4, wherein the terminal information is a predetermined file including a URI or a phone type and a browser type of the terminal. 6. The method of claim 5, Determining whether the subscriber information and the terminal information are in a format defined in the OMA standard; And The method of claim 1, further comprising the step of converting the subscriber information and the terminal information into a predetermined code if the format is not defined in the OMA standard. The method as claimed in claim 6, wherein the predetermined code is generated using a plug-in method. The method of claim 7, wherein the subscriber information and the terminal information defined in the OMA standard are Client ID and URI, respectively. A proxy server for extracting and transmitting customer information including subscriber information and terminal information among information received from a mobile terminal connected through a wireless communication network; And And an authentication server for receiving the customer information, determining whether to authenticate the user, and storing the customer information for a predetermined period of time when the authentication is performed and the authentication is completed. 10. The authentication server according to claim 9, And if the customer information is stored in a predetermined memory, authentication for the customer information is skipped. The apparatus of claim 9 or 10, wherein the customer information is stored in the predetermined memory for a predetermined period of time. The apparatus of claim 11, wherein the subscriber information is one of MIN, MDN, and Client ID, and the terminal information is a phone type or a URI. 13. The apparatus of claim 12, Further comprising an encryption module for converting the subscriber information or the terminal information into a predetermined code when the subscriber information or the terminal information is not in a format defined in the OMA standard. The apparatus of claim 13, wherein the predetermined code is generated using a plug-in method.

Images