KR101343371B1 - Method And Server for Preventing with Wireless Internet Service by Copied Mobile Communication Terminal - Google Patents

Abstract

The present invention relates to a method and a server for preventing wireless Internet access by a duplicated mobile communication terminal.

The present invention provides a system for providing a wireless Internet service to a mobile communication terminal, the method comprising checking whether the client ID and the authentication key is received from the mobile communication terminal, and as a result, the client ID and the authentication key is received In the case of the present invention, there is provided a system for preventing wireless Internet access by a duplicated mobile communication terminal, characterized in that it comprises an authentication server allowing communication between the mobile communication terminal and the data core network (DCN).

According to the present invention, by receiving an authentication key from the mobile communication terminal has an effect that can determine whether or not the mobile communication terminal is duplicated.

Replication, prevention, authentication, authentication key, bootstrap, customer care

Description

Method and Server for Preventing with Wireless Internet Service by Copied Mobile Communication Terminal}

The present invention relates to a method and a server for preventing wireless Internet access by a duplicated mobile communication terminal.

In recent years, as computer, electronic and communication technologies have advanced rapidly, various wireless communication services using a wireless network have been provided. Accordingly, a service provided in a mobile communication system using a wireless communication network is being developed into a multimedia communication service for transmitting not only voice services but also data such as circuit data, packet data, and the like.

In addition, with the rapid development of electronic engineering and communication engineering, mobile communication terminals have various functions. That is, with the rapid development of wireless communication and data processing technology, most people can use not only voice calls but also Internet access, video communication and video message transmission using mobile communication terminals.

Due to the rapid dissemination of mobile communication terminals, a considerable amount of communication occurring in human relations has been made through mobile communication terminals, and mobile communication terminals have become an essential communication means in modern life.

Among various additional services other than the voice call service, services using a data network such as a wireless Internet access service or a data service mostly charge an additional fee to the user in addition to the basic fee.

In addition, as users use the wireless data service rapidly in recent years, there are various problems in charges. Among these problems, users who use data services that require relatively expensive fees, access the data services with a duplicated mobile communication terminal that illegally duplicates the terminal, use the service illegally, and have different service usage fees. There is damage such as being imposed on.

Conventionally, a method of detecting and authenticating a duplicated mobile communication terminal is performed in hardware. However, in the conventional hardware method, there are many inconveniences in detecting, authenticating, and blocking a duplicated mobile communication terminal by replacing the terminal or installing an additional device in the terminal by hardware.

In addition, as users who illegally copy the terminal continuously disable the hardware prevention system, it takes a long time and cost to supplement it again with hardware. In particular, the time required for copy protection is that the second damage by the duplicated mobile communication terminal may occur during that time. And users have to spend time every time and unnecessary costs are incurred to inconvenience both users and operators.

Therefore, before using the wireless Internet, a communication service provider undergoes a device authentication process. A technology capable of preventing access of a duplicated mobile communication terminal by interworking with a system for managing an authentication key used in the device authentication process. Development is required.

In order to solve the above problems, the present invention, when the mobile communication terminal wants to use the wireless Internet service to access the wireless Internet service, the authority setting for the specific content in order to avoid the charges by the duplicated mobile communication terminal In case of Provisioning Content, the client ID and Auth Key that can use the wireless internet service are generated and stored in the database and transmitted to the mobile communication terminal, and the initialization request signal is received from the mobile communication terminal. If received, confirms whether the client ID and the authentication key are received from the mobile terminal, and as a result of the check, allows communication between the mobile terminal and the data core network only when the client ID and authentication key are received from the mobile terminal. By doing so, it is possible to prevent billing by the duplicated mobile communication terminal. Providing the anti-Fi access method and the server according to the mobile communication terminal to which the replication has that purpose.

In order to achieve the above object, the present invention provides a system for providing a wireless Internet service to a mobile communication terminal, the new subscription information, number change information, name change information, device change status information, MIN or ESN of the mobile communication terminal A customer data management server managing a current state information including a customer data distribution server; A data core network providing the wireless internet service to the mobile communication terminal; And generating a client ID and an authentication key for the wireless Internet service and transmitting the same to the mobile terminal, and receiving an authority setting request signal for a specific content from the customer data management server. And store the current state information, the client ID and the authentication key in correspondence with the phone number of the mobile communication terminal, and receive the initialization request signal from the mobile communication terminal. And an authentication server for confirming whether an authentication key is received and allowing communication between the mobile communication terminal and the data core network (DCN) when the client ID and the authentication key are received. System for preventing wireless Internet access by duplicated mobile communication terminal It provides.

In addition, according to another object of the present invention, a method for allowing an authentication server to access a wireless Internet service by a mobile communication terminal in conjunction with a customer data management server, (a) a client ID and authentication for the wireless Internet service Generating a key and transmitting the generated key to the mobile communication terminal; (b) receiving an authority setting request signal for a specific content from the customer data management server; (c) storing the current state information of the mobile communication terminal, the client ID and the authentication key in correspondence with the telephone number of the mobile communication terminal; (d) receiving an initialization request signal from the mobile communication terminal; (e) checking whether the client ID and the authentication key are received from the mobile communication terminal; And (f) allowing communication between the mobile communication terminal and the data core network when a client ID and the authentication key are received as a result of the checking in step (e). It provides a method for preventing wireless Internet access by.

In addition, according to another object of the present invention, a server that allows access to a wireless Internet service by a mobile communication terminal in conjunction with a customer data management server, the server comprising: a communication unit for interworking with the customer data management server and the mobile communication terminal; A client ID and an authentication key are generated and transmitted to the mobile communication terminal, and when the authority setting request signal for a specific content is received from the customer data management server, the current state information of the mobile communication terminal, the client ID, and the authentication. The key is stored in accordance with the telephone number of the mobile communication terminal, and when the initialization request signal is received from the mobile communication terminal, confirms whether the client ID and the authentication key are received from the mobile communication terminal, and confirms. As a result, when the client ID and the authentication key is received from the mobile communication terminal, the control unit for controlling to allow communication between the mobile communication terminal and the data core network; And it provides a server for preventing the wireless Internet access by the mobile terminal comprising a storage unit for storing the client ID and the authentication key.

delete

As described above, according to the present invention, when the mobile communication terminal wants to use the wireless Internet service by accessing the wireless Internet service, the authority setting for the specific content is requested in order to prevent the charging by the duplicated mobile communication terminal. In the case of provisioning content, a client ID and an authentication key for using a wireless Internet service are generated, stored in a database, transmitted to a mobile communication terminal, and an initialization request signal is received from the mobile communication terminal. If the client ID and the authentication key is received from the mobile terminal, and confirms that the client ID and authentication key is received from the mobile terminal, communication between the mobile terminal and the data core network is allowed. This prevents billing by the duplicated mobile communication terminal. It can work.

In addition, according to the present invention, when the mobile communication terminal accesses the wireless Internet service, by receiving the authentication key stored in the secure storage area (Secure Storage) of the mobile communication terminal by checking whether the mobile terminal is duplicated, the duplicated mobile There is an effect that can block the access to the wireless Internet service source of the communication terminal.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the drawings, the same reference numerals are used to designate the same or similar components throughout the drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

1 is a block diagram schematically illustrating a system for preventing a wireless Internet access by a duplicated mobile communication terminal according to the first and second embodiments of the present invention.

A system for preventing wireless Internet access by a duplicated mobile communication terminal according to the first and second embodiments of the present invention includes a mobile communication terminal 110, a mobile communication network 120, a customer data management server 130, It includes an authentication server 140 and a database 150.

The mobile communication terminal 110 refers to a terminal that performs normal voice call and data communication through wireless communication in association with the mobile communication network 120.

In addition, the mobile communication terminal 110 may be a personal digital assistant (PDA), a cellular phone, a personal communication service (PCS) phone, a hand-held PC, a CDMA phone, and a mobile broadband system (MBS) phone. Can be. Here, MBS phone refers to a mobile phone to be used in the fourth generation system currently being discussed.

In addition, the mobile communication terminal 110 receives a client ID and an authentication key from the authentication server 140 and stores the data in a secure storage area.

Here, the secure storage area (Secure Storage) refers to an area that is not accessible to the mobile terminal manufacturer, which is merely illustrative of the technical idea of the present invention, the general knowledge in the technical field to which the present invention belongs Those having a variety of modifications and modifications to the secure storage area may be applied without departing from the essential characteristics of the present invention.

The mobile communication network 120 is wirelessly connected to the mobile communication terminal 110 to perform various functions such as voice communication service, wireless data service or wireless internet service, and message service.

The mobile communication network 120 includes a wireless base station 122, a mobile switching center (MSC) 124, a data core network (DCN) 126, and a home location register (HLR). (128).

The wireless base station 122 performs a location registration function, a function of allocating a radio channel, and various functions required for radio call processing such as handoff. The mobile communication switching center 124 performs basic and additional service processing for providing a voice communication service, incoming and outgoing call processing of a subscriber, location registration procedure and handoff procedure, and interworking with other networks.

The Home Location Register (HLR) 128 is a database that stores service profiles related to mobile subscriber information, and includes a mobile identification number (MIN) of the mobile communication terminal 110 and a unique terminal. Stores subscriber information by storing information about an electronic serial number (ESN) and service type.

The data core network 126 may include a high speed data service for providing a packet data communication service, an internet / intranet access service, a virtual private network (VPN) access service, a simple IP and a mobile IP service, Performs Point-to-Point Protocol (PPP) authentication, billing, and packet compression.

A customer data distribution server (CDS) 130 refers to a server that manages current status information corresponding to new subscription, number change, name change, and device change of each subscriber of the mobile communication terminal 110. . In addition, the customer data management server 130 performs a function of delivering customer data to other networks.

The authentication server 140 is a server of a communication service provider that performs a series of tasks required for the mobile communication terminal 110 to be provided with specific content by accessing the wireless Internet. The mobile communication terminal 110 and the mobile communication network 120 It checks or initializes various statuses of) and performs daily functions to perform tasks necessary for operation.

Here, the authentication server 140 according to the first and second embodiments of the present invention may include a bootstrap server or may be a bootstrap server.

The authentication server 140 according to the first and second embodiments of the present invention receives the current state information of the mobile communication terminal 110 from the customer data management server 130. Here, the current state information includes new subscription information, device change information, name change information, one or more of MIN and ESN information.

The authentication server 140 according to the first and second embodiments of the present invention receives an authority setting request signal for a specific content from the customer data management server 130.

The authentication server 140 according to the first and second embodiments of the present invention generates a client ID using the MIN of the current state information, and generates an Auth Key using the ESN of the current state information. It performs the function.

The authentication server 140 according to the first and second embodiments of the present invention has a function of matching the current state information, the client ID, and the authentication key to the telephone number of the mobile communication terminal 110 and storing the same in the database 150. Do this.

In addition, the authentication server 140 transmits the generated client ID and the authentication key to the mobile communication terminal (110).

When the authentication server 140 according to the first and second embodiments of the present invention receives an initialization request signal from the mobile communication terminal 110, the client ID and the authentication key are received from the mobile communication terminal 110. Check whether or not.

Here, the initialization request signal is a signal transmitted from the mobile communication terminal 110 to the authentication server 140 when a data error occurs in the mobile communication terminal 110 or when the name of the user of the mobile communication terminal 110 is changed. to be.

As a result of the check, when the client ID and the authentication key are not received from the mobile communication terminal 110, the authentication server 140 regards the mobile communication terminal 110 as a duplicated mobile communication terminal and the data with the mobile communication terminal 110. It performs a function of blocking communication between the core network 126.

On the other hand, when the check result, when the client ID and the authentication key is received from the mobile communication terminal 110, the authentication server 140 regards the mobile communication terminal 110 as an authenticated terminal and the mobile communication terminal 110 and the data core It performs a function to allow communication between the networks 126.

The database 150 is a storage means for receiving and storing the current state information, the client ID and the authentication key by matching the telephone number of the mobile communication terminal 110 from the authentication server 140.

In the present invention, as shown in FIG. 1, the database 150 is described as a separate device independent of the authentication server 140, but this is merely illustrative of the technical idea of the present invention, and is generally in the technical field to which the present invention belongs. Those skilled in the art will be applicable to various modifications and variations as a concept included in the authentication server 140 in the scope of not departing from the essential characteristics of the present invention.

2 is a schematic block diagram of an authentication server according to the first and second embodiments of the present invention.

The authentication server 140 according to the first and second embodiments of the present invention includes a communication unit 210, a control unit 220, and a storage unit 230.

In the present invention, the authentication server 140 is described as including only the communication unit 210, the control unit 220 and the storage unit 230, but this is merely illustrative of the technical idea of the present invention, Those skilled in the art to which the invention belongs will be applicable to various modifications and variations to the components included in the authentication server 140 without departing from the essential characteristics of the present invention.

The communication unit 210 is a communication means for performing a function of interworking with the mobile communication terminal 110, the customer data management server 130, and the database 150, and performs a function of transmitting and receiving various data.

The control unit 220 is a control means for controlling the overall function of the server, and controls the communication unit 210 to receive the current state information of the mobile communication terminal 110 from the customer data management server 130. Here, the current state information includes new subscription information, device change information, name change information, one or more of MIN and ESN information.

The controller 220 receives a permission setting request signal for a specific content from the customer data management server 130.

The controller 220 generates a client ID using the MIN of the current state information, and generates an Auth Key using the ESN of the current state information.

The control unit 220 performs a function of matching the current state information, the client ID and the authentication key to the telephone number of the mobile communication terminal 110 and storing it in the database 150.

In addition, the controller 220 transmits the generated client ID and the authentication key to the mobile communication terminal 110.

When the controller 220 receives the initialization request signal from the mobile communication terminal 110, the controller 220 checks whether the client ID and the authentication key are received from the mobile communication terminal 110.

As a result of the check, when the client ID and the authentication key are not received from the mobile communication terminal 110, the controller 220 regards the mobile communication terminal 110 as a duplicated mobile communication terminal and the data communication terminal 110 and the data core. A function of controlling to block communication between the networks 126 is performed.

On the other hand, when the check result, when the client ID and the authentication key is received from the mobile communication terminal 110, the controller 220 regards the mobile communication terminal 110 as an authenticated terminal and the mobile communication terminal 110 and the data core network. 126 performs a function of controlling to allow communication between.

The storage unit 230 means storage means for storing various data necessary for driving the authentication server 140 and performs a function of storing a client ID and an authentication key.

3 is a flowchart illustrating a method for preventing wireless Internet access by a duplicated mobile communication terminal according to a first embodiment of the present invention.

The authentication server 140 receives the current state information on the mobile communication terminal 110 from the customer data management server 130 (S310).

For example, when the mobile communication terminal 110 accesses a wireless Internet service, the customer data management server 130 may request that the mobile communication terminal 110 have new subscription information, device change information, name change information, and number change state information. Current status information including at least one of MIN and ESN information is transmitted to the authentication server 140.

The customer data management server 130 transmits a permission request signal for a specific content to the authentication server 140 (S320).

That is, when the mobile communication terminal 110 accesses the wireless Internet service, the customer data management server 130 sends an authorization request signal for the specific content to enable the specific content to be used in the wireless Internet service. Will be sent.

The authentication server 140 generates a client ID by using a mobile identification number (MIN) of the current state information, and generates an authentication key by receiving an electronic serial number (ESN) of the current state information (S330).

That is, the authentication server 140 generates a client ID and an authentication key which are wireless identifiers that enable the mobile communication terminal 110 to use the wireless Internet service.

The authentication server 140 matches the phone number of the mobile communication terminal 110 with the current state information, the client ID, and the authentication key of the mobile communication terminal 110 to store the data in the database 150 (S340).

The authentication server 140 transmits the generated client ID and the authentication key to the mobile communication terminal 110 (S350).

The mobile communication terminal 110 receives the client ID and the authentication key from the authentication server 140 and stores them in a secure storage area (S360).

Here, the secure storage area (Secure Storage) refers to an area that is not accessible to the mobile terminal manufacturer, which is merely illustrative of the technical idea of the present invention, the general knowledge in the technical field to which the present invention belongs Those having a variety of modifications and modifications to the secure storage area may be applied without departing from the essential characteristics of the present invention.

4 is a flowchart illustrating a method for preventing wireless Internet access by a duplicated mobile communication terminal according to a second embodiment of the present invention.

The mobile communication terminal 110 accesses the wireless Internet (that is, the data core network 126) using the client ID and the authentication key (S410).

The authentication server 140 checks whether an initialization request signal is received from the mobile communication terminal 110 (S420).

Here, the initialization request signal is a signal transmitted from the mobile communication terminal 110 to the authentication server 140 when a data error occurs in the mobile communication terminal 110 or when the name of the user of the mobile communication terminal 110 is changed. to be.

As a result of checking in step S420, when an initialization request signal is received from the mobile communication terminal 110, a client ID and an authentication key are requested from the mobile communication terminal 110 (S430).

The authentication server 140 checks whether the client ID and the authentication key are received from the mobile communication terminal 110 (S440).

As a result of checking in step S440, when the client ID and the authentication key are received from the mobile communication terminal 110, the authentication server 140 determines that the mobile communication terminal 110 is not a duplicated terminal and the mobile communication terminal 110. Allow communication between the data core network 126 (S450).

That is, the mobile communication terminal 110 may use the wireless Internet service after receiving the wireless Internet identifier response signal.

On the other hand, when the check result of step S440, when the client ID and the authentication key is not received from the mobile communication terminal 110, the authentication server 140 determines the mobile communication terminal 110 as a duplicated terminal and the mobile communication terminal 110 ) And the communication between the data core network 126 (S460).

That is, in the case of the mobile communication terminal 110 in which a normal device change, name change, or number change is performed, current state information of the mobile communication terminal 110 is recorded by the customer data management server 130, and the steps S360 and step Although the client ID and the authentication key are received from the authentication server 140 and stored in a secure storage area, as in S370, since the duplicated terminal is to duplicate the ESN and the MIN of the normal terminal, it may request access to a wireless Internet service. Although, it will not be able to store the client ID and authentication key in a secure storage area, it is not possible to transmit the authentication key to the authentication server (140).

In this case, the authentication server 140 may transmit a message indicating whether to be replicated to the mobile communication terminal 110 as a method of blocking communication between the mobile communication terminal 110 and the data core network 126. As merely an example of the technical idea of the present invention, a person skilled in the art to which the present invention belongs does not depart from the essential characteristics of the present invention. It will be applicable to various modifications and variations.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

As described above, when the mobile communication terminal wants to use the wireless Internet service by accessing the wireless Internet service, provision of rights for specific content is requested in order to prevent error caused by the duplicated mobile communication terminal. In the case of generating a client ID (Client ID) and authentication key (Auth Key) that can use the wireless Internet service, stored in the database and transmitted to the mobile communication terminal, when the initialization request signal is received from the mobile communication terminal, mobile communication Check whether the client ID and the authentication key are received from the terminal, and as a result of the check, allow communication between the mobile communication terminal and the data core network only when the client ID and authentication key are received from the mobile communication terminal. Mobile communication to prevent billing by terminal Applied in the terminal authentication field, when a mobile communication terminal accesses a wireless Internet service, the mobile terminal receives the authentication key stored in a secure storage area of the mobile communication terminal and checks whether the mobile communication terminal is replicated. It is a very useful invention that the effect of blocking the access to the wireless Internet service source of the mobile communication terminal occurs.

1 is a block diagram schematically illustrating a system for preventing a wireless Internet access by a duplicated mobile communication terminal according to a first embodiment and a second embodiment of the present invention;

2 is a schematic block diagram of an authentication server according to the first and second embodiments of the present invention;

3 is a flowchart illustrating a method for preventing wireless Internet access by a duplicated mobile communication terminal according to a first embodiment of the present invention;

4 is a flowchart illustrating a method for preventing wireless Internet access by a duplicated mobile communication terminal according to a second embodiment of the present invention.

Description of the Related Art

110: mobile communication terminal 120: mobile communication network

130: customer data management server 140: authentication server

150: database

Claims (7)

delete delete delete In the authentication server connected to the customer data management server in a method for allowing access of the wireless Internet service by the mobile communication terminal, Generating a client ID and an authentication key for the wireless Internet service and transmitting the generated ID to the mobile communication terminal; Receiving an authority setting request signal for a specific content from the customer data management server; Storing current state information of the mobile communication terminal, the client ID and the authentication key by matching the telephone number of the mobile communication terminal; Receiving an initialization request signal from the mobile communication terminal; Confirming whether the client ID and the authentication key are received from the mobile communication terminal; And A process of allowing communication between the mobile communication terminal and the data core network when the client ID and the authentication key are received as a result of the confirmation of the verification process Wireless Internet access prevention method by a duplicated mobile communication terminal comprising a. A communication unit interworking with a customer data management server and a mobile communication terminal; A client ID and an authentication key are generated and transmitted to the mobile communication terminal, and when the authority setting request signal for a specific content is received from the customer data management server, the current state information of the mobile communication terminal, the client ID, and the authentication key. Is stored according to the telephone number of the mobile communication terminal, the client ID and the authentication key are additionally received from the mobile communication terminal after receiving an initialization request signal from the mobile communication terminal, and the data with the mobile communication terminal. A control unit controlling to allow communication between the core networks; And A storage unit for storing the client ID and the authentication key Server for preventing a wireless Internet access by a mobile communication terminal comprising a. 6. The method of claim 5, Wherein, Receiving a mobile identification number (MIN) from the mobile communication terminal to generate the client ID, and receives the electronic serial number (ESN) from the mobile communication terminal to generate the authentication key Server to prevent wireless Internet access. 6. The method of claim 5, Wherein, When the authentication key is not received from the mobile communication terminal, the mobile communication terminal is determined to be a duplicated mobile communication terminal and controls to block communication between the mobile communication terminal and the data core network. Server for preventing wireless Internet access by.

Images