KR20030071981A - Wireless LAN service system for providing automatic connection function and method thereof - Google Patents

Abstract

The present invention relates to a WLAN service system and a method thereof.

The wireless LAN service system providing the automatic access function according to the present invention includes a network band information set to receive all packet data transmitted from a mobile communication terminal connected through a wired / wireless LAN without adjusting network configuration information. 1NIF part; A second NIF unit in which network band information is set so as not to receive all packet data transmitted from a mobile communication terminal; And by setting the IP address of the first NIF unit as the gateway and not setting the gateway information of the external public network, the packet data is redirected to the first NIF unit, and the packet data received by the first NIF unit is transmitted to the external network through the second NIF unit. Translating the network address of the mobile communication terminal into a single public IP address to transmit the data received from the external network to the mobile communication terminal through the second NIF unit and the first NIF unit, INET data processing unit that processes real-time input, adjusts routing routines, handles IP forwarding between the 1NIF unit and the 2NIF unit, and processes the message traffic between the external network and the internal network by converging the lookup request with one authorized DNS server. Include.

According to the present invention, it is possible to provide a web service by connecting the Internet network without modifying network configuration information of a mobile communication terminal that has moved the network band, and performs various authentication information accordingly by performing authentication and charging processing by itself. It can be provided as an external management device, and provides the gateway function, DHCP function, IP / MAC filtering function to facilitate the user of the mobile communication terminal.

Description

Wireless LAN service system for providing automatic connection function and method therefor {Wireless LAN service system for providing automatic connection function and method

The present invention relates to a wireless LAN service system and a method for providing an automatic access function, and more particularly, a mobile communication terminal can automatically connect through a short-range wireless network (wireless LAN) without adjusting network configuration information. The present invention relates to a wireless LAN service system and a method for providing a web service by interworking with an external network using an automatically connected mobile communication terminal, and providing a gateway function, a DHCP function, an authentication / billing function, and an IP / Mac filtering function.

Wireless LAN, which has been introduced in Korea since 1994, is a technology that extends LAN in environments where existing wired networks are difficult to install by using wireless transmission technology.It transmits and receives data through 2.4 GHz waves instead of 10Mbps or 100Mbps based wired cables. Use the method.

Wireless LANs have raised considerable expectations for their use due to various advantages. First of all, departments and mobile companies require a lot of relocation costs and consumables when using existing wired networks. Except in the case of network expansion, there is an efficiency that does not require additional costs. Therefore, in a work environment requiring maintenance, relocation, mobility, etc., or where a relatively large sales organization is required (e.g., insurance companies, car sales offices, etc.), even if a wired network environment is established, it is not sufficient to supplement dynamic business activities. Is the best solution available to distributors, local sales offices, logistics companies, manufacturers, schools and warehouses.

In addition, due to aesthetics and environmental factors, wired networks often have to be bypassed by a few hundred meters, far exceeding tens of meters in a straight line. In accordance with the government's policy on the installation of optical cables, there are cases where a private line is applied separately and a plurality of networks are integrated and used. In this case, using the WLAN, it is possible to reduce the cabling cost.

The WLAN is a device for WLAN, a service registration method, and a method used according to the number of mobile communication terminals to be connected, the size of an area requiring a service, the type of service provided for each ISP, and the involvement of a WLAN service provider. If you look at the configuration and services of the basic WLAN as follows.

First, an ISP equipped with a backbone network directly installs an AP device and provides a WLAN service by renting a registered PC card or a mobile communication terminal to a user who applied for WLAN service. Since the mobile terminal has information, the service user does not need to perform a separate procedure for roaming between service areas of the AP device. For example, an institution having a backbone network provides a wireless LAN service to a person related to an institution so that a business can be processed regardless of movement within a certain region.

Second, ISPs equipped with backbone networks and AP devices provide wireless LAN services for the general public using their respective mobile communication terminals. Access to the site to apply for a wireless LAN service, and receive a communication program and identification information for using the wireless LAN to use the service.

Third, when the wireless LAN service provider provides the wireless LAN service by installing an AP device and connecting the ISP and the service user, the service user applies for the service to the wireless LAN service provider and uses his own unregistered mobile communication terminal. In other words, the use of the WLAN service is fragmented and more complicated communication is achieved between the mobile communication terminal, the AP device, the WLAN service provider, and the ISP.

Fourthly, ISP implements inter-regional network configuration as wireless LAN equipment, and provides wireless LAN service to wireless LAN service providers (for example, PC rooms) and individual users in a wider area than those mentioned above. There is a case to provide.

As described above, despite various applications, wireless LANs are generally used in special fields such as logistics companies and hospitals due to low data transmission rate (the wireless LAN transmission rate was limited to 2Mbps). Its use was not activated. However, as the data transmission speed of wireless LAN is improved to 11Mbps and the purchase of equipment is easy, the usage of the wireless LAN is expected to be extended not only to general companies but also to the general public. In addition, each research institute including the Ministry of Information and Communication is actively developing and researching wireless LAN that can service in the 5GHz band which is at least 2 times (22Mbps) to 5 times (54Mbps).

However, as described above, the service user adapts to a more demanding WLAN environment than the wired network environment due to the WLAN service that is differentiated according to various environments such as the type of the WLAN protocol, the use of the fixed IP and the floating IP, and the charging method. This inconvenience in use has been reluctant to the general public who lacks knowledge of the network and the mobile communication terminal.

For example, the IP address of a mobile communication terminal can be used only at a fixed location or a network where a service is registered, and when moved to another network band, the IP address of the mobile communication terminal is allocated to the network environment of the mobile communication terminal (ie, IP address). , Subnet mask, gateway address, DNS address, etc.).

This inconvenience in using the wireless LAN service is cumbersome and difficult for the general public who lacks the knowledge of the mobile communication terminal. Even if the network band is shifted, it connects the external Internet network without modifying the network configuration information of the mobile communication terminal. If a wireless LAN service device is implemented, it may provide a lot of convenience for future mobile communication terminal users.

In addition, the WLAN service device performs authentication and billing processing by itself, and provides various statistical information accordingly to the ISP server, the regional management server, and the PMS (Property Management System) server to improve the efficiency of WLAN management. There is also a need for technology development.

The present invention has been made to meet the above requirements, the mobile communication terminal can be automatically connected through a short-range wireless network (wireless LAN) without adjusting the network configuration information, the external connection to the mobile communication terminal automatically connected It provides web service by interworking with network, provides gateway function, DHCP function, authentication / billing function, IP / Mac filtering function, and provides various statistical information according to web service use by interworking with external wireless LAN management system. It is an object of the present invention to provide a WLAN service system and a method thereof.

1 is a block diagram schematically illustrating a form in which a WLAN service system providing an automatic access function according to the present invention is connected to an external device.

2 is a block diagram schematically showing an internal configuration of a WLAN service system providing an automatic access function according to the present invention.

3 is a diagram illustrating an IP address translation function provided by NAT means according to the present invention.

4A and 4B show the format of the IP packet and the TCP packet, respectively.

5 is a diagram illustrating a procedure in which the INET data processing unit processes the DNS redirection according to the present invention.

6 illustrates a database record field of a WLAN service system that provides an automatic access function according to the present invention.

7A to 7B are flowcharts illustrating a WLAN service providing method for providing an automatic access function according to the present invention.

<Explanation of symbols for main parts of drawing>

400: wired / wireless internal network 500: wireless LAN service system

510: first NIF unit 520: second NIF unit

530: INET data processing unit 530a: DHCP means

530b: NAT means 530c: HTTP R / D means

530d: authentication means 530e: charging means

530f: PMS interlocking means 530g: DNS R / D means

530h: route setting means 530i: IP forwarding means

530j: database 600: external network

In order to achieve the above object, a wireless LAN service system providing an automatic access function according to the present invention is all the packet data transmitted from a mobile communication terminal connected through a wired / wireless LAN without adjusting network configuration information A first NIF unit configured to receive network bandwidth information and configured to interwork with an internal network; A second NIF unit configured with network band information so as not to receive all packet data transmitted from the mobile communication terminal, and system configured to interwork with an external network; And generating a translation table that maps the network address of the mobile communication terminal to a network address combined with one public IP address and a plurality of port numbers, and processes the starting point network address translation and the destination network address translation using the generated translation table. In order to transmit the packet data converted to the first NIF unit to the external network, a NAT means for performing operation correction of the upper protocol is input to the external network in real time in a routing table, and according to the start point address and the destination address of the packet data. Path setting means for setting the input / output path routines of the first NIF unit and the second NIF unit in the routing table, and redirects the packet data direction to one authorized DNS server by substituting the DNS server address of the packet data transmitted by the mobile communication terminal. DNS R / D means, socket programs, transport routines, IP forwarding means for performing the transmission function of the network layer and the link layer, forwarding the corresponding data packet to the application program layer, the first NIF unit and the second NIF unit, and the mobile IP terminal, if a floating IP is set, DHCP means assigned to the mobile communication terminal, HTTP R / D means for changing the destination address of the packet data so that packet data redirected to the first NIF unit is not transmitted to the external network; Provides an input screen to the mobile communication terminal to authenticate the mobile terminal user with the authentication information entered, record the IP address and device identification number of the mobile communication terminal, function the IP forwarding means according to the authentication result, and authenticate the mobile. Authentication means for providing a logout window to the communication terminal to terminate the function of the IP forwarding means when a logout signal is transmitted. The INET data processing unit includes a charging means for recording a service providing start time when the mobile communication terminal is authenticated and recording a service providing end time when the user of the mobile communication terminal logs out to calculate a web service fee.

In order to achieve the above object, the WLAN service providing method for providing an automatic access function according to the present invention (a) receives all the packet data transmitted from the mobile communication terminal through the first NIF unit for the internal network separated from the external network Translating each IP address of the packet data; (b) in the case of packet data requesting a web service, processing service authentication of the mobile communication terminal through an HTTP redirect, providing a logout window, and executing charging; (c) In order to transmit the packet data converted to the first NIF unit to the external network, an external public network gateway is input to the routing table in real time, and input / output of each of the first NIF unit and the second NIF unit according to the start point address and the destination address of the packet data. Setting a route routine in the routing table; (d) DNS processing the packet data to receive a DNS lookup from an authorized DNS server; (e) processing data communication between the mobile communication terminal, the first NIF unit, the second NIF unit, and the external network system through IP forwarding and port forwarding; And (f) stopping the provision of the web service and generating the charging information when receiving the logout signal from the mobile communication terminal.

Hereinafter, a WLAN service system for providing an automatic access function according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram schematically illustrating a form in which a WLAN service system 500 providing an automatic access function according to the present invention is connected to an external device.

Referring to FIG. 1, a WLAN service system (hereinafter, referred to as a " WLAN service system according to the present invention ") 500 providing an automatic access function according to the present invention is a mobile communication terminal through a wired / wireless local area network. 100 is connected to the wired communication terminal 300 and the local management server 200 and is connected to an ISP (Internet Service Provider) server managing a DNS (Domain Name Server) server through an external network 600. .

Here, the mobile communication terminal 100 may be equipped with a wireless LAN card such as a PC, a PDA (Personal Digital Assistant), a notebook, and the like, and a wired LAN data communication device may be equipped with a NIC or a network interface card (NIC). As a terminal device, etc., it has been used in a broad concept encompassing a mobile device that is movable and connectable to a LAN.

In addition, the region management server 200 is installed in a specific region and manages a unique service, and is interoperable with the WLAN service system 500 according to the present invention. For example, PMS (Property Management System) server 200 of the hotel as a local management server, the PMS server 200 is a dualization problem in the case of providing additional wireless LAN services in the existing hotel service management and billing, etc. In this case, it will be possible to unify the system by interworking with the wireless LAN service system 500 according to the present invention.

The wired communication terminal 300 is used as a terminal concept that is connected to the local management server 200 to assist service management. For example, when the wireless LAN service system 500 according to the present invention is installed in a hotel, a hotel employee may carry a job by having a mobile communication terminal 100, but the wired communication terminal 300 fixedly installed in various places of the hotel It is common to use a job to perform a task.

Here, the WLAN service system 500 according to the present invention includes a first NIF unit 510, a second NIF unit 520, and an INET data processing unit 530. A NIF (Network InterFace) unit refers to an Ethernet device. The first NIF unit 510 is configured for an internal network, and the second NIF unit 520 is configured for an external network. In this way, Ethernet devices are divided into internal and external networks, and various data processing is performed at the transport layer and the network layer (each of the third and fourth layers of OSI (Open System Interconnection)). It is to provide a function and the like. The INET data processing unit 530 provides a kind of interface function between the first NIF unit 510 and the second NIF unit 520.

In addition, if the ISP provides a general Internet service in addition to providing a service by installing the wireless LAN service system 500 according to the present invention in a specific region, the wireless LAN service system 500 is an ISP server (or Radius server) 700 Can be requested for authentication, personal information and authentication information for authentication comparison can be provided from ISP server 700, and various statistical information (eg, billing information, service usage time information, access count information) according to service provision Etc.) may be provided to the ISP server 700.

Therefore, the mobile communication terminal and the wired communication terminal user can access the wireless LAN service system 500 according to the present invention without manipulating the network environment on the terminal by the network P & P service, including external Internet service, DHCP function, IP / You can use Mac filtering function, authentication / billing function, etc.

2 is a block diagram schematically showing an internal configuration of a WLAN service system 500 according to the present invention.

Referring to FIG. 2, the WLAN service system 500 according to the present invention includes a first NIF unit 510, a second NIF unit 520, and an INET data processing unit 530, as described above. 530 is DHCP means 530a, NAT means 530b, HTTP R / D means 530c, authentication means 530d, charging means 530e, PMS interworking means 530f, DNS R / D means 530g. ), Routing setting means 530h, IP forwarding means 530i, and database 530j.

Here, each of the means constituting the INET data processing unit 530 may provide a plurality of functions that are distinguished from each other by various combinations as those that perform their own independent functions. In particular, the HTTP R / D means 530c, the authentication means 530d, the charging means 530e, and the PMS interlocking means 530f are of such a nature that their functions can be further separated. However, for convenience of description, the preferred embodiment of the WLAN service system 500 according to the present invention is configured to include all the above-described means.

The first NIF unit 510 and the second NIF unit 520 are means for transmitting and receiving data through a wireless LAN of a predetermined frequency band (usually using a 2.4 GHz frequency band that does not require a license) (for example, a wireless LAN card, USB client, etc.) and a connection port of a wired transmission medium to transmit and receive wired LAN data. In general, the NIF part follows the high-speed 802.11 standard of DSSS (Direct Sequence Spread Spectrum) method.

The first NIF unit 510 is configured with network bandwidth information so as to receive all packet data transmitted from the mobile communication terminal 100 connected through the wired / wireless LAN without adjusting the network configuration information (ie, the sub-network). Set the mask to "0.0.0.0"), the system is set to work with the internal network. On the other hand, the second NIF unit 520 is set to the network band information so as not to receive all the packet data transmitted from the mobile communication terminal 100 (that is, set the sub-network mask to "255.255.255.255"), the external network The system is set to work with 600.

When the first NIF unit 510 and the second NIF unit 520 are set in this way, the first NIF unit 510 allocated to the internal network is allocated to the mobile communication terminal 100 even if the mobile communication terminal 100 has any network configuration information. Will receive all packet data sent by.

In addition, the INET data processing unit 530 sets the IP address of the first NIF unit 510 as a gateway in the routing table and does not set the gateway information (the gateway information of the second NIF unit) of the external authorized network to delimit the direction of packet data. 1NIF unit 510 is switched. That is, the INET data processing unit 530 cannot transmit the packet data to the external network 600. The reason for closing the external network 600 is that of the internal / external network 600 before going through the transmission process described later. When all the gateway addresses exist, the INET data processing unit 530 prevents the user from selecting which device of the first NIF unit 510 and the second NIF unit 520 to transfer the packet data to.

The DHCP (Dynamic Host Configuration Protocol) means 530a sets a private IP address of a predetermined network band (for example, "192.168.1.1") when the mobile communication terminal 100 that transmits the packet data has set the floating IP. If the sub network mask is set to "255.255.255.0", it is possible to allocate a private IP address of "192.168.1.2" to "192.168.1.254") to the mobile communication terminal 100.

NAT means (530b) is a network address (fixed IP address or assigned private IP address) of the mobile communication terminal 100 is assigned to one public IP address (Wireless LAN service system 500 according to the present invention from an external public network) Received IP address) and a plurality of port numbers combined to create a mapping table mapped to a network address. This Network Address Translation (NAT) is an IP address translation technology called "IP Masquerading" (or "Port Address Translation" ("Alias") ", ie multiple private IP addresses and unrecognizable. It converts fixed IP address into one public IP address and maps (translates) multiple IP addresses using port numbers.

In addition, the NAT means 530b performs additional processing such as checksum, TCP sequence number, TCP recognition number correction, as well as replacement of the address field to correct the operation of the IP protocol and the TCP protocol.

The NAT means 530b processes the source network address translation (SNAT) and the destination network address translation (DNAT) using the generated translation table when the IP forwarding means 530i performs port forwarding. do. Here, SNAT processes packet data of an internal network when transmitting to the external network 600, and DNAT processes data when receiving data from the external network 600 and transmitting it to the internal network (for example, part of a Linux program indicating SNAT). For example, "iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to 1.2.3.4").

3 is a diagram illustrating an IP address translation function provided by NAT means 530b according to the present invention.

4A and 4B show the format of the IP packet and the TCP packet, respectively.

The routing setting means 530h inputs the external authorized network gateway into the routing table in real time in order to transmit the packet data converted to the first NIF unit 510 to the external network 600, and to the starting point address and the destination address of the packet data. Accordingly, the input / output path routines of the first NIF unit 510 and the second NIF unit 520 are set in the routing table. Therefore, the packet data received by the entire first NIF unit 510 can be forcibly forwarded to the external network.

The INET data processing unit 530 may be implemented using, for example, a Linux system, and the routing means 530h implemented in Linux includes three routing tables: a neighbor table, a forwarding information base (FIB) table, and a routing cache. Keep it. The NAVER table has address information of a device connected to the INET data processing unit 530 and protocol passing information through data transmitted and received, and the Linux system manages the NAVER table using ARP (Address Resolution Protocol). .

The FIB table is a routing structure that contains the routing information needed to access any IP address as a network mask method, and the routing cache has all the routes currently in use or recently used in the hash table. The routing means 530h dynamically manages the route table such as adding or deleting a new route entry to the route table (which may be deleted by the kernel's scheduler) to set the route routine.

The INET data processing unit 530 may be configured as, for example, a kind of "Linux box". The INET data processing unit 530 includes all data processing modules of the OSI 7 layer for a WLAN data transmission service and requests a program interface through a kernel. The data processing module may include an application program, a socket, a transmission routine, a network layer, a link layer, a transmission device, a bus, a port, and the like. The application program may include an authentication means 530d, a charging means 530e, and a PMS linkage. Means 530f, and the first NIF unit 510 and the second NIF unit 520 are in charge of the physical layer below the transmission device. The remaining components mostly belong to the transport routine and the network layer.

The kernel includes an interrupt handler, a scheduler, a supervisor, a network flag, a kernel memory, and the like to operate each means of the INET data processing unit 530 through a series of program interfaces. Such a Linux system, OSI layer 7 and the kernel is a technical matter well known to those skilled in the art to which the present invention belongs, detailed description thereof will be omitted.

The DNS R / D (ReDirection) means converges the lookup request by replacing the DNS server address of the packet data transmitted by the mobile communication terminal 100 and redirecting the packet data to one authorized DNS server 700.

5 is a diagram illustrating a procedure for processing a DNS redirect by the INET data processing unit 530 according to the present invention.

First, when the mobile communication terminal 100 requests the ARP to the routing setting means 530h (S500), the routing setting means 530h is the physical network address corresponding to the IP address, that is, the device identification number (device identification of the first NIF unit). Number) to transmit (S510), and register the device identification number of the mobile communication terminal (100) (S520). Subsequently, when the mobile communication terminal 100 executes the web browser (S530), the packet data including the domain name or the domain name input by the user is set to DNS R / D means (530g) for the website set as the default page on the web browser. Is transmitted to (S540). The DNS R / D means 530g converges all packet data to a specific DNS server 700 set by the INET data processing unit 530 through redirection processing of DNS packet data (S550), and decompresses a domain name into an IP address. A DNS lookup is requested (S560). When the DNS R / D means 530g finishes the DNS lookup (S570), the web browser of the mobile communication terminal 100 connects to the corresponding IP address and performs internet data communication (S580).

The IP forwarding means 530i includes the socket program, the transmission routine, and the like as described above as the NAT means 530b, the routing means 530h and the DNS R / D means 530g perform data processing in the corresponding transport layer. The network layer and the link layer perform a transmission function, and forward the corresponding data packet to the application program layer, the first NIF unit 510 and the second NIF unit 520.

Table 1 shows some examples of classified code of Linux kernel functions used for IP forwarding.

dev_queue_xmit ()-net / core / dev.c (579) calls start_bh_atomic () if device has a queuecalls enqueue () to add packet to queuecalls qdisc_wakeup () to wake deviceelse calls hard_start_xmit () calls end_bh_atomic () ip_forward ()-net / ipv4 / ip_forward.c (72) checks for router alertif packet is not meant for any host, drops itif TTL has expired, drops packet and sends ICMP message backif strict route cannot be followed, drops packet and sends ICMP message back to senderif necessary, sends ICMP message telling sender packet is redirectedcopies and releases old packetdecrements TTLif there are options, calls ip_forward_options () to set themcalls ip_send () ip_finish_output ()-include / net / ip.h (140) sets sending device to output device for fiven routecalls output function for destination ip_send ()-include / net / ip.h (162) calls ip_fragment () if packet is too big for devicecalls ip_finish_output

The HTTP R / D means 530c stores the packet data redirected to the first NIF unit 510 by NAT means 530b, routing means 530h, DNS R / D means 530g, and IP forwarding means 530i. Change the destination address of the packet data so that it is not processed. That is, the HTTP R / D means 530c loses the packet data when it is not for the web service, and authenticates the destination address of the packet data requesting the web service (provides a kind of web server function) (530d). Replace the IP address with to reset the direction. This HTTP Redirection is one of the DNAT formats.

On the other hand, in the case of the response packet of the authentication means 530d for the web service request, the HTTP R / D means 530c replaces the start address of the response packet with the destination address of the packet data in the first web service request, and the destination address. In the field, the IP address of the mobile communication terminal 100, which is the first starting point address, is recorded.

The authentication means 530d receives the authentication information input screen to the mobile communication terminal 100 when the packet data redirected by the HTTP R / D means 530c is received, receives the authentication information, and moves to the input authentication information. By authenticating the user of the communication terminal, the IP address of the mobile communication terminal 100 and the device identification number are recorded.

In addition, the authentication means 530d compares the authentication information stored in its database with the authentication information input from the mobile communication terminal to process authentication, and functions as a Radius (Remote Authentication Dial-In User Service) client. By transmitting the authentication information entered into the authentication process can be requested and the authentication process result can be provided. At this time, the authentication means 530d receives the authentication data encrypted using the MD5 method when receiving the authentication result from the Radius server.

The authentication means 530d records the authenticated user information (for example, IP address and mobile terminal identification number) in the database 530j so that the IP forwarding means 530i can provide a web service, and authenticated mobile communication. Provide a logout window to the terminal 100. The authentication means 530d deletes the authentication user information from the database 530j when the logout signal is transmitted, thereby causing the IP forwarding means 530i to stop providing the web service.

In addition, the authentication means 530d may provide a separate web page for the web service termination application when the mobile communication terminal user closes the logout window without transmitting the logout signal, and the mobile terminal user logs out. When the connection is terminated without transmitting a signal, the web service providing function may be terminated if packet data transmission / reception does not occur for a predetermined time (that is, by checking an idling time).

As described above, the authentication means 530d may perform the Radius client function to transmit session information (statistical information) to the Radius server in the case of logout as in the login process.

The authentication means 530d records the specific IP address or device identification number in the database 530j and provides a web service without performing an authentication function when packet data including the recorded specific IP address or device identification number is received. In this case, packet data that has not passed the authentication procedure is subject to non-billing. For example, the terminal IP address or the Mac address used by the employee of the hotel providing the WLAN service can be directly registered in the WLAN service system according to the present invention or registered in the WLAN service system through the aforementioned PMS server. It could provide unauthorized IP and MAC filtering capabilities.

When the user of the mobile communication terminal registers with the PMS server 200, the authentication means 530d receives and stores user personal information and authentication information from the PMS server 200, and when the user is released from the PMS server 200. Delete stored personal information and authentication information.

The charging means 530e records the service providing start time when the mobile communication terminal is authenticated, and calculates the web service fee by recording the service providing end time when the user of the mobile communication terminal logs out. In addition, the charging means 530e may calculate the web service fee by counting the number of bytes of packet data transmitted and received by the mobile communication terminal 100 during the recorded time.

The authentication means 530d requests the service and transmits the personal information of the authenticated mobile communication terminal user to the PMS server 200, and the charging means 530e uses web service time information and packet data count information corresponding to the personal information. Statistical information such as billing information is transferred to the PMS server 200.

The PMS interworking means 530f includes an interworking protocol for interworking with the PMS server 200, and a MFIS (Micros-Fidelio Interface Specification) server (not shown) includes the WLAN service system 500 and the PMS server 200. Provides an interface between For example, after initialization, the PMS linking means 530f receives an LS (Link Start) signal from the MFIS server, and transmits link description (LD), link record (LR), and link alive (LA) information in order. The LD information records link presentation information in a format such as "LD / DA960502 / TI153000 / V # 1.0 / IFWW /".

The PMS interlocking means 530f provides an interface means between the authentication means 530d, the charging means 530e, and the PMS server 200, and receives the IP data when the message data registered with the PMS server 200 exists. And transmits to the mobile communication terminal 100 through the means 530i. For example, if there are a large number of hotel guests and one of them registers their location information with the PMS server 200, the location information is provided to a mobile communication terminal provided by colleagues of the guest who registered the location information.

The database 530j has a general solution for controlling the transmission and reception of network data including a web page using the TCP / IP protocol as a database system, and in addition to the request of each component of the above-described INET data processing unit 530. The data can be recorded / modified / deleted, and the data can be retrieved and provided.

The database may be implemented as a Windows NT / 2000 server, an MS SQL 7/2000 server, or the like. However, when the WLAN service system according to the present invention is implemented as a Linux system, the database should be implemented as an Oracle database server or a MY SQL server.

The database 530j includes the first NIF unit network setting information, the second NIF unit network setting information, the translation table, the router table, the DNS server address, the non-authentication processing target IP address, the non-authentication processing target device identification number, the service user authentication information, and the personal information. Data generated and input by the first NIF unit 510, the second NIF unit 520, and the INET data processing unit 530, such as authentication information, web service usage time information, packet data count information, billing information, and message data. Manage.

6 illustrates a database 530j recording field of a WLAN service system 500 that provides an automatic access function according to the present invention.

Hereinafter, a WLAN service providing method for providing an automatic access function according to the present invention with reference to the accompanying drawings will be described in detail with an example to which the present invention is applied.

7A to 7B are flowcharts illustrating a WLAN service providing method for providing an automatic access function according to the present invention.

One example to which the present invention is applied is a case where the WLAN service system 500 according to the present invention is installed in a hotel and interworks with a PMS server 200 of the hotel.

First, when the WLAN service system 500 according to the present invention is initialized, it is linked with the PMS server 200 according to the interworking protocol (S700).

Subsequently, a person who wants to use the hotel checks in at the counter, at which time the user registers with the PMS server 200 of the hotel, and the authentication means 530d receives and stores user personal information and authentication information from the PMS server 200. (S705). For example, the authentication means 530d parses the check-in information from the PMS server 200 and stores the check-in information in the database 530j. The room number may be stored as an ID and the first five digits of the user name may be designated as a password.

The hotel guest who has finished checking in uses his mobile terminal 100 while moving in the hotel, and the INET data processing unit separates the packet data transmitted from the mobile terminal 100 from the external network 600. All received through the 1NIF unit 510 (S710), and each IP address of the packet data is translated (S715).

Here, when the packet data transmitted by the mobile communication terminal 100 is packet data requesting a web service (S720), the INET data processing unit 530 processes service authentication of the mobile communication terminal 100 through HTTP redirection. (S730). That is, when the redirected packet data arrives, the authentication means 530d provides the authentication input screen to the starting address of the packet data (the same is provided to the mobile communication terminal 100 through the translation process (DNAT)) (S735). When the authentication information is transmitted from the mobile communication terminal 100, the authentication information is received from the PMS server 200 and compared with the stored authentication information (S740).

On the other hand, if the packet data does not request the web service (S720), the HTTP R / D means 530c loses the packet data (S725).

The authentication means 530d may request authentication by transmitting authentication information input by the mobile communication terminal user to the PMS server 200 or the Radius server when the matching authentication information cannot be found in the database 530j.

When the authentication is processed, the authentication means 530d leaves the authenticated authentication information as a cookie on the mobile communication terminal 100, and provides a logout window (S745). After providing the logout window, the authentication means 530d calculates the billing by recording the service usage time or counting transmission / reception packet data (S750).

As the user of the mobile communication terminal is authenticated, the routing unit inputs the external authorized network gateway into the routing table in real time in order to transmit the packet data converted to the first NIF unit 510 to the external network 600, and starts the address of the packet data. The I / O path routines of the first NIF unit 510 and the second NIF unit 520 are set in the routing table according to the destination address (S755).

Subsequently, the DNS R / D means 530g processes the DNS data by DNS redirection and receives a DNS lookup from one authorized DNS server 700 (S760).

As the user of the mobile communication terminal acquires the IP address of the site to which the user wants to access, the IP forwarding means 530i performs the mobile communication terminal 100, the first NIF unit 510, and the second NIF unit 520 through IP forwarding and port forwarding. And it provides a full-fledged web service by processing data communication between the external network system (S765).

When the logout signal is transmitted from the mobile communication terminal 100 that has received the web service (S770), the IP forwarding means 530i stops providing the web service, and the charging means records the service providing end time or the mobile communication terminal ( The web service fee is calculated by counting the number of bytes of packet data transmitted and received (100) (S795).

In this process, when the mobile communication terminal user closes the logout window without transmitting the logout signal (S775), the authentication means 530d separately provides a webpage for the web service termination application (S780). In addition, when the user of the mobile communication terminal terminates the connection without transmitting the logout signal (S785), the authentication means 530d checks the idling time and terminates the web service providing function (S790).

The INET data processing unit 530 transmits personal information, web service usage time information, packet data count information, billing information, etc. of the user of the mobile communication terminal to the PMS server 200 (S800).

Finally, when the hotel guest checks out at the counter, the WLAN service system 500 according to the present invention receives the personal information to be registered and deleted from the PMS server 200 (S805), and the INET data processing unit 530 checks. Out-of-hotel hotel guests modify / delete the authentication user information, personal information, authentication information, translation table, router table generated by using the wireless LAN through the mobile communication terminal (100) (S810).

The present invention has been described above with reference to the preferred embodiments, which are merely examples and are not intended to limit the present invention, and those skilled in the art to which the present invention pertains do not depart from the essential characteristics of the present invention. It will be appreciated that various modifications and applications are not possible that are not illustrated above. For example, each component specifically shown in the embodiment of the present invention may be modified. And differences relating to such modifications and applications will have to be construed as being included in the scope of the invention defined in the appended claims.

According to the present invention, even if the network band is moved, it is possible to provide a web service by connecting the external Internet network without modifying the network configuration information of the mobile communication terminal, by performing the authentication and billing process itself, By providing statistical information to ISP server, regional management server, PMS server, etc., it is possible to improve the efficiency of WLAN management.

In addition, according to the present invention, it is possible to facilitate the user of the mobile communication terminal by providing a gateway function, DHCP function, IP / MAC filtering function.

Claims (13)

In a system for providing a wireless LAN access service, A first NIF unit configured with network bandwidth information configured to receive all packet data transmitted from a mobile communication terminal connected through a wired / wireless LAN without adjusting network configuration information, and configured to interwork with an internal network; A second NIF unit configured with network band information so as not to receive all packet data transmitted from the mobile communication terminal, and system configured to interwork with an external network; And By setting an IP address of the first NIF unit as a gateway and not setting gateway information of an external public network, the packet data is redirected to the first NIF unit, and the packet data received by the first NIF unit is transferred through the second NIF unit. Translating the network address of the mobile communication terminal into a single public IP address so as to be transmitted to an external network and to transmit data received from the external network to the mobile communication terminal through the second NIF unit and the first NIF unit, and packet data During communication, the external authorized network gateway is input in real time, the routing setup routine is adjusted, the IP forwarding between the first NIF unit and the second NIF unit is handled, and the message between the external network and the internal network is converged by converging the lookup request with one authorized DNS server. Auto-connector comprising an INET data processing unit for processing traffic Wireless LAN service system to provide. The method of claim 1, wherein the INET data processing unit Create a translation table that maps the network address of the mobile communication terminal to a network address combined with one public IP address and a plurality of port numbers, and processes the starting point network address translation and the destination network address translation using the generated translation table. NAT means for performing operation correction of a higher protocol; In order to transmit the packet data converted to the first NIF unit to an external network, an external authorized network gateway is input to a routing table in real time, and an input / output path of each of the first NIF unit and the second NIF unit according to a start point address and a destination address of the packet data. Routing means for setting a routine in a routing table; DNS R / D means for converging a lookup request by replacing the DNS server address of the packet data transmitted by the mobile communication terminal and redirecting the packet data to an authorized DNS server; And As the NAT means, the routing means and the DNS R / D means perform data processing on the corresponding transport layer, the socket program, the transmission routine, the network layer, and the link layer transmit functions, and an application program layer and the first NIF. And an IP forwarding means for forwarding the data packet to the second NIF unit. The method of claim 2, And a DHCP means for allocating a private IP address of a predetermined network band to the mobile communication terminal if the mobile communication terminal has set a floating IP. The NAT means generates a translation table for mapping a private IP address assigned to the mobile communication terminal to a network address combined with one public IP address and a plurality of port numbers. Service system. The method of claim 2, wherein the INET data processing unit HTTP R / D means for changing a destination address of the packet data such that packet data redirected to the first NIF unit is not processed through the NAT means, routing means, DNS R / D means, and IP forwarding means; When the packet data redirected by the HTTP R / D means is delivered, an authentication information input screen is provided to the mobile communication terminal to authenticate the mobile communication terminal user with the input authentication information, and the IP address of the mobile communication terminal, Authentication means for recording a device identification number, functioning the IP forwarding means according to an authentication result, and providing a logout window to the authenticated mobile communication terminal to terminate the function of the IP forwarding means when a logout signal is transmitted; And And a charging means for recording a service providing start time when the mobile communication terminal is authenticated, and calculating a web service fee by recording a service providing end time when the user of the mobile communication terminal logs out. Wireless LAN service system to provide. The method of claim 4, wherein the charging means And a web service fee calculated by counting the number of bytes of packet data transmitted and received by the mobile communication terminal during the recorded time. The method of claim 4, wherein the authentication means When the mobile communication terminal user closes the logout window without transmitting a logout signal, a web page for web service termination request is separately provided, and the mobile communication terminal user accesses without transmitting a logout signal. The wireless LAN service system for providing an automatic access function, characterized in that to terminate the web service providing function if the transmission and reception of packet data for a predetermined time in the case of terminating the. The method of claim 4, wherein the authentication means The wireless LAN service system providing an automatic access function, characterized in that the authentication information input from the mobile communication terminal is transmitted to the Radius server for authentication, and upon logout, the session information is transmitted to the Radius server. The method of claim 4, wherein the authentication means Record a specific IP address or device identification number to provide a web service without performing an authentication function when packet data including the IP address or device identification number is provided. LAN service system. The method of claim 4, wherein When the user of the mobile communication terminal registers with the PMS server, the authentication means receives and stores user personal information and authentication information from the PMS server, and deletes the stored personal information and authentication information when the user is unregistered from the PMS server. Further comprising the function of delivering personal information of the authenticated mobile communication terminal user to a PMS server by applying for a license, The charging means further has a function of delivering the web service usage time information, packet data count information, charging information to the PMS server, And a PMS interlocking means for providing an interface means between the authentication means, the charging means, and the PMS server by providing an interworking protocol. The method of claim 9, wherein the PMS interlocking means Wireless LAN service system for providing an automatic access function, characterized in that for transmitting the message data registered to the PMS server to the mobile communication terminal through the IP forwarding means. The method of claim 2, Among the data generated, received, and accessed by the first NIF unit, the second NIF unit, and the INET data processing unit, the first NIF unit network setting information, the second NIF unit network setting information, a translation table, a router table, a DNS server address, and an unauthorized authentication process. Database that stores / manages data including target IP address, non-authentication target device identification number, authentication user information, personal information, authentication information, web service usage time information, packet data count information, billing information, and message data. Wireless LAN service system providing an automatic access function characterized in that it comprises. In the method for providing a wireless LAN access service, (a) receiving all of the packet data transmitted from the mobile communication terminal through the first NIF unit for the internal network separated from the external network, and translating each IP address of the packet data; (b) in the case of packet data requesting a web service, processing service authentication of the mobile communication terminal through an HTTP redirect, providing a logout window, and executing charging; (c) In order to transmit the packet data converted to the first NIF unit to an external network, an external public network gateway is input to the routing table in real time, and the first NIF unit and the second NIF unit are respectively set according to a start point address and a destination address of the packet data. Setting an input / output path routine of the routing table; (d) DNS processing the packet data to receive a DNS lookup from an authorized DNS server; (e) processing data communication between the mobile communication terminal, the first NIF unit, the second NIF unit, and an external network system through IP forwarding and port forwarding; And (f) stopping receiving the web service when the logout signal is received from the mobile communication terminal and generating charging information. The method of claim 12, wherein step (b) (b1) when the packet data arrives at the authentication means through HTTP redirection, providing an authentication information input screen to a corresponding mobile communication terminal to receive authentication information; (b2) comparing the inputted authentication information with the authentication information stored in a database or transmitting the authentication information to an ISP server or a PMS server for authentication; (b3) if authenticated, leaving the authenticated authentication information as a cookie on the mobile communication terminal and providing a logout window; And (b4) A method of providing a WLAN service providing an auto access function, characterized in that the charge is calculated by recording a service usage time or counting transmission / reception packet data.