KR20110102282A - Terminal Authentication System and Method by Blacklist Authentication Method - Google Patents

Abstract

The present invention relates to a terminal authentication system and method using a blacklist authentication method. When a location registration is requested from a user terminal, an authentication request message including device identification information of the user terminal is transmitted to a device identification register. A switch receiving an authentication request response message from a device identifier register and providing the user terminal to the user terminal, and when an authentication request message is received from the switch, it is determined whether the device identification information is present in the device identification information database and not present. If not, the device identification register for transmitting the device identification information authentication request message to the subscriber management device to receive the device identification information authentication result, and if the device identification information authentication request message is received from the device identification register, the device identification in the blacklist database Information exists Checking whether or not, and includes a subscriber management unit for transmitting the device identification information verification result according to the inspection result to the device identification register.
Therefore, according to the present invention, even if a terminal or an individual distributed through its own agent by a terminal manufacturer is a terminal purchased overseas, the terminal may not be included in the blacklist and may process authentication for call processing.

Description

System and method for black terminal authentication method and system

The present invention relates to a terminal authentication system and method using a blacklist authentication method, and more particularly, in response to a location registration request of a user terminal, an exchange sends an authentication request message including device identification information of the user terminal to a device identification register. When transmitting, the device identification register determines whether the device identification information exists in the device identification information database, and if not, transmits a device identification information authentication request message to the subscriber management device, and the subscriber management device blacklists the device identification information. It is checked whether the device identification information exists in a database, and if the device identification information authentication result according to the test result is transmitted to the exchange through the device identification register, the device is included in the device identification information authentication result. Use the above according to the status information of the identification information The present invention relates to a terminal authentication system and method using a blacklist authentication method for controlling the use of an own terminal.

Recently, the use environment of the mobile communication network is to provide a reliable service to users regardless of wired / wireless and voice or data communication, and it is required to provide a security service between parties performing communication.

As part of such a request, in a mobile communication network environment, in order to prevent an illegal use of an illegal terminal such as a stolen terminal or a duplicate terminal, the user terminal is authenticated using device identification information of the user terminal.

1 is a view showing a conventional user terminal authentication method.

Referring to FIG. 1, an Equipment Identity Register (EIR) receives International Mobile Station Equipment Identity (IMEI) information from a subscriber management device (S102) and registers the IMEI information in an IMEI information database (S104). The EIR manages IMEI and status information for each IMEI of the user terminal for terminal authentication, and the status of the IMEI is divided into black, white, and gray. Here, Black means a state that cannot be used in the network due to theft, loss, etc., White means a normal use state, Gray means a state that requires management for reasons such as network operation.

When the user terminal requests the exchange to register the location for using the mobile communication service in the state where S104 is performed (S106), the exchange transmits an authentication request message including the IMEI of the user terminal to the EIR (S108). . That is, when the location registration is requested from the user terminal, the exchange transmits an authentication request message on whether to use the terminal to the EIR using the IMEI of the user terminal.

Then, the EIR searches the IMEI information database and determines whether there is an IMEI that matches the IMEI included in the authentication request message (S110).

If there is an IMEI that matches the determination result of S110, the EIR checks the state of the IMEI and transmits an authentication request response message including the state information to the exchange (S112). That is, the EIR transmits a response message for the authentication request to the exchange by indicating that there is a matching IMEI and the IMEI state is White if the IMEI state is White, and if it is Black.

The exchange allows the use of the user terminal when the IMEI state in the authentication request response message is white, and does not allow the use of the user terminal when black.

If there is no IMEI matched as a result of the determination in S110, the EIR recognizes the user terminal as a third party terminal and requests IMEI authentication from its A subscriber management device (S114).

Then, the A subscriber management apparatus queries the IMEI information database to determine whether the corresponding IMEI exists, and recognizes the third party terminal as there is no IMEI and transmits the IMEI information inquiry message to the B subscriber management apparatus of the third party (S116). .

Then, the B subscriber management apparatus searches its own IMEI information database to determine whether the IMEI exists and transmits an IMEI information response message including the determination result to the subscriber A subscriber management apparatus (S118). That is, the B subscriber management device transmits the IMEI information to the A subscriber management device if the IMEI exists in the self-contained IMEI information database. It transmits to the A subscriber management apparatus.

The A subscriber management device transmits the IMEI information received from the B subscriber management device to the EIR (S120), and the EIR indicates a response to the authentication request by indicating White when the IMEI state is White and Black when Black. The transfer to the exchange (S122).

Then, the EIR registers the IMEI information in an IMEI information database (S124), and the registered IMEI information can be processed by itself when a terminal authentication request comes back from a corresponding user terminal later.

The exchange proceeds an additional location registration procedure if the authentication result received from the EIR is White, and if authentication is black, authentication failure processing.

However, the white list authentication method as described above is a terminal only for receiving IMEI information from a subscriber management device in advance (ie, a terminal distributed by the company) or receiving IMEI information from a third party (ie, a terminal distributed by a third party). If the terminal successfully handles the authentication and the terminal is purchased from a terminal manufacturer or an individual purchased from overseas, the IMEI information is not registered in the carrier's EIR or subscriber management device. There is a disadvantage that the processing does not proceed.

The present invention has been made to solve the above-described problems, the object of the present invention is a terminal that is distributed through its own agent from the terminal manufacturer or even if the terminal is not included in the blacklist even if the terminal purchased by individuals abroad, call processing The present invention provides a terminal authentication system and method using a blacklist authentication method that can process authentication for a system.

According to an aspect of the present invention, when a location registration is requested from a user terminal, an authentication request message including device identification information of the user terminal is transmitted to a device identification register, and an authentication request response message is received from the device identification register. If an authentication request message is received from the exchange and the exchange to provide to the user terminal, it is determined whether the device identification information exists in the device identification information database. A device identification register which transmits to the management device to receive the device identification information authentication result, and when the device identification information authentication request message is received from the device identification register, whether the device identification information exists in a blacklist database, Device identification based on the test result Provided is a terminal authentication system using a blacklist authentication method including a subscriber management device for transmitting an information authentication result to the device identification register.

The device identification information is IMEI (International Mobile Equipment Identity) information, and includes at least one of manufacturer information, model information, and a serial number.

The subscriber management apparatus registers the device identification information in its own device identification information database, and requests the device identification register to register the device identification information.

According to another aspect of the present invention, a communication unit for communication with the exchange and the subscriber management device, a device identification information database storing the device identification information of the user terminals and the status information of each device identification information, the device identification information is included from the exchange When the authentication request message is received, the device identification information database is searched to check whether the device identification information exists, and if present, an authentication request response message including status information of the device identification information is sent to the exchange. And a device identification register including an authentication processing unit for transmitting the request for device identification information authentication to the subscriber management apparatus and the device identification information authentication result and transmitting the device identification information authentication result to the exchange.

The device identification information database stores device identification information of the user terminal and state information for each device identification information, and the state of the device identification information is black, which means that the device cannot be used in the network, and white for normal use. ), It is divided into Gray, which means a condition that requires management.

The device identification register may further include a device identification information registration unit for storing the device identification information in the device identification information database when registration of the device identification information is requested from the subscriber management apparatus through the communication unit.

The device identification information authentication result includes state information of the device identification information displayed in white when it is not present in the blacklist database of the subscriber management device and in black when present.

According to another aspect of the invention, the communication unit for communication with the device identifier register, a blacklist database storing the device identification information for the terminals that are not available in the network, the device identification information authentication request message from the device identifier Receives a device identification information inquiry processing unit for inquiring whether the corresponding device identification information exists in the blacklist database and transmitting the device identification information authentication result according to the inquiry result to the device identification register. A management device is provided.

The subscriber management apparatus registers the device identification information that does not exist in the blacklist database as a result of the inquiry of the device identification information inquiry processing unit in the device identification information database, and requests the device identification register to register the device identification information. The information registration unit may further include.

The device identification information inquiry processing unit determines that the user terminal corresponding to the device identification information is not the own terminal when the device identification information does not exist in the black list database, and transmits the device identification information authentication result in white, and the black If present in the list, the authentication result of the device identification information is transmitted in black.

According to another aspect of the present invention, in response to the location registration request from the user terminal, the exchange transmits an authentication request message including the device identification information of the user terminal to the device identification register, the device identification register device identification information Determining whether the device identification information exists in a database, and if not, transmitting a device identification information authentication request message to a subscriber management device, wherein the subscriber management device has the device identification information in a blacklist database; Checking whether or not, transmitting the device identification information authentication result according to the test result to the device identification register, and transmitting the device identification information authentication result to the exchange as an authentication request response message; The exchange exchanges the authentication request response message. There is provided a terminal authentication method using a blacklist authentication method including determining whether to permit the use of the user terminal according to the state information of the device identification information included in the paper, and controlling the use of the user terminal according to the determination. .

In the controlling of the use of the user terminal, when the state information of the device identification information is white, the use of the user terminal is allowed to perform a subsequent procedure for location registration, and the state information of the device identification information. Is black, it informs the user terminal of the authentication failure of the user terminal.

According to the present invention, even if a terminal or an individual distributed through its own agent by a terminal manufacturer is a terminal purchased overseas, the terminal may not be included in the blacklist and may process authentication for call processing.

In addition, even if the IMEI is not registered in the EIR, if the IMEI is not registered in the blacklist database, the terminal authentication may be successfully processed.

1 is a view showing a conventional user terminal authentication method.
2 is a diagram illustrating a terminal authentication system using a blacklist authentication method according to the present invention.
Figure 3 is a block diagram schematically showing the configuration of the EIR according to the present invention.
Figure 4 is a block diagram schematically showing the configuration of a subscriber management device according to the present invention.
5 is a diagram illustrating a terminal authentication method using a blacklist authentication method according to the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the description with reference to the accompanying drawings, the same or corresponding components will be given the same reference numerals and redundant description thereof will be omitted.

2 is a diagram illustrating a terminal authentication system using a blacklist authentication method according to the present invention.

Referring to FIG. 2, the terminal authentication system based on the black list authentication method includes a user terminal 200, an exchange 300, an equipment identity register (EIR) 400, and a subscriber management apparatus 500. .

The user terminal 200 requests a location registration to the exchange 300 to use a mobile communication service, and receives an authentication result for using a terminal from the exchange 300. The authentication result includes state information to which the device identification information of the user terminal 200 belongs. If the state information received from the exchange 300 is black, since the user terminal 200 is an illegal terminal, the user terminal 200 is controlled by using various well-known methods.

However, if the state information of the device identification information is white or gray, the user terminal 200 is not an illegal terminal and thus maintains the current state so that the user can continue to use it.

The location registration is a processing procedure for notifying the switch 300 of the location, status, identifier, slot period, and other features of the user terminal 200. The location registration of the user terminal 200 may be performed when the power of the user terminal 200 is turned on or off, when the user terminal 200 moves between the exchange 300, and the parameters of the user terminal 200 are changed. Is carried out in the case.

The device identification information is IMEI (International Mobile Equipment Identity) information and includes a terminal manufacturer, a model, and a serial number. The IMEI information may include a type approval code (TAC), a final assembly code (FAC), a serial number (SNR), and the like.

Hereinafter, the device identification information will be described as IMEI.

The user terminal 200 may be various mobile terminals such as a mobile communication terminal, a personal digital assistant (PDA), a smart phone, a Wi-Fi terminal, and a WiBro terminal.

The switch 300 provides various mobile communication services for the user terminal 200, and is a part of the main control function for the entire mobile communication network, and is an essential system component in providing basic services of mobile communication. It is composed.

When the exchange 300 requests a location registration from the user terminal 200, one of a type of a list to which an IMEI of the user terminal 200 belongs, namely, a white list, a black list, and a gray list, through the EIR 400. Receives the list information of the delivered to the user terminal 200.

In addition, the exchange 300 retrieves the location registration information when there is a call attempt request from the user terminal 200, and attempts location registration authentication with respect to the user terminal 200 having no location registration information. Here, the location registration authentication refers to the user's authentication and the use of the terminal as to whether the user terminal 200 is available in the communication network as well as the location information of the user terminal 200 in response to the call attempt request to the user terminal 200. Perform authentication on availability.

The switch 300 is a mobile switching center (MSC) that provides a service for a call from the user terminal 200, a SGSN (Serving GPRS Support Node) that provides a service for a packet call such as data to the user terminal 200. ), And may be used in different terms according to generations such as second generation, third generation, and fourth generation.

The EIR 400 checks or manages identification information related to hardware of the user terminal 200. The EIR 400 stores the information of the stolen or lost terminal, and compares the user terminal information received from the exchange 300 with the information of the previously stored terminal to the corresponding user terminal 300 when the subscriber authentication and location registration request is made. Determine whether theft has been lost or stolen. To this end, the EIR 400 stores the information of the stolen and lost terminals in a black list.

The EIR 400 stores and manages the IMEI of the user terminal to identify the user terminal authorized to access the exchange 300. In particular, the EIR 400 classifies and manages the IMEI of each user terminal into a white list, a black list, and a gray list. Here, Black means a state that cannot be used in the network due to theft, loss, etc., White means a normal use state, Gray means a state that requires management for reasons such as network operation.

The EIR 400 obtains IMEI information of the user terminal 200 in response to the location registration authentication request and checks whether the EIR 400 is a stolen terminal device. If it is confirmed that the device is a stolen device, the location registration authentication fails and the user terminal 200 cannot be used in the communication network.

Therefore, the EIR 400 notifies the switch 300 of the location registration authentication failure, and the switch 300 notifies the user terminal 200 of the location registration authentication failure.

When the EIR 400 receives the authentication request message for the user terminal 200 from the exchange 300, the EIR 400 determines whether the IMEI included in the authentication request message exists in the IMEI information database, and if present, white, The list belonging to the black and gray lists is determined, and an authentication request response message including the determination result is transmitted to the exchange 300.

In addition, when the IMEI does not exist in the IMEI information database, the EIR 400 recognizes that the user terminal 200 is not its own terminal and requests IMEI authentication from the subscriber management apparatus 500. Here, the term “not own terminal” refers to a third party terminal, a terminal manufacturer's own distribution terminal, or a terminal purchased by an individual from abroad.

That is, when the user terminal 200 is not the own terminal, the EIR 400 transmits an IMEI authentication request message including the IMEI of the user terminal 200 to the subscriber management apparatus 500.

In addition, the EIR 400 receives an IMEI authentication result for the IMEI authentication request message from the subscriber management apparatus 500 and transmits an authentication request response including the IMEI authentication result to the exchange 300.

In addition, when the EIR 400 receives the IMEI registration request message from the subscriber management apparatus 500, the EIR 400 stores the IMEI information included in the IMEI registration request message in its IMEI information database.

The subscriber management apparatus 500 stores the IMEI together with the IMEI status before distribution of its own terminal, and registers the IMEI information in the EIR 400.

In addition, the subscriber management apparatus 500 notifies the device identification register 400 when the stolen terminal is registered. That is, a report on an illegal terminal such as a stolen terminal or a duplicate terminal is received by the operator of the mobile communication network, and the IMEI of the illegal terminal is already registered on the black list of the EIR 400 and managed.

In addition, when the subscriber management apparatus 500 receives the IMEI authentication request message from the EIR 400, the subscriber management apparatus 500 checks whether the IMEI exists in the blacklist database. Then, the subscriber management apparatus 500 transmits an IMEI authentication result including the test result to the EIR, and prevents the above process from being repeatedly performed when a terminal authentication request is received for the same IMEI in the future. Register the IMEI in its own IMEI information database and request the EIR to register the IMEI.

3 is a block diagram schematically showing the configuration of an EIR according to the present invention.

Referring to FIG. 3, the EIR 400 includes a communication unit 410, an IMEI information database 420, an authentication processor 430, and an IMEI information registration unit 440 for communication with an exchange and a subscriber management device.

The IMEI information database 420 stores IMEIs and status information of each IMEI. The International Mobile Equipment Identity (IMEI) information is information describing a device of a user terminal. IMEI information describes the terminal manufacturer, model, and serial number. The IMEI information may include a type approval code (TAC), a final assembly code (FAC), a serial number (SNR), and the like. The IMEI state is divided into black, white, and gray, and black means a state that cannot be used in the network due to theft, loss, etc., white means normal use, and gray manages for reasons of network operation. Means the necessary state.

When the location registration is requested from the user terminal through the communication unit 410, the authentication processing unit 430 checks whether the IMEI of the user terminal exists in the IMEI information database 420.

If the IMEI exists, the authentication processing unit 430 transmits an authentication request response message including the status information of the IMEI to the exchange.

That is, when the IMEI exists in the IMEI information database 420 and is present in the white list, the authentication processing unit 430 transmits an authentication request response message with the status information of the IMEI to white to the exchange. In this case, the location registration authentication of the user terminal is successful and can be used in the communication network of the user terminal.

If the IMEI of the user terminal is present in the blacklist, the authentication processor 430 determines that the user terminal is an illegal terminal and transmits an authentication request response message of black status information of the IMEI to the exchange. . In this case, the location registration authentication of the user terminal has failed, so that the user terminal cannot be used in the communication network. As described above, the authentication processing unit 430 notifies the exchange of the location registration authentication failure for the location registration authentication failure, and the exchange notifies the user terminal of the location registration authentication failure.

In addition, when the IMEI does not exist in the IMEI information database 420, the authentication processor 430 determines that the user terminal is not its own terminal, and requests a subscriber management device to authenticate the IMEI, and manages the subscriber. Receive a result of the IMEI authentication request from the device and send it to the EIR.

The IMEI information registration unit 440 stores the IMEI information in the IMEI information database 420 when registration of the IMEI information is requested from the subscriber management device through the communication unit 410.

4 is a block diagram schematically showing the configuration of a subscriber management apparatus according to the present invention.

Referring to FIG. 4, the subscriber management apparatus 500 includes a communication unit 510, an IMEI information database 520, a blacklist database 530, an IMEI inquiry processing unit 540, and an IMEI information registration unit 550.

The IMEI information database 520 stores IMEIs and state information of each IMEI. The International Mobile Equipment Identity (IMEI) information is information describing a device of a user terminal. IMEI information describes the terminal manufacturer, model, and serial number. The IMEI state information refers to information of a white list, a black list, and a gray list.

The blacklist database 530 stores IMEI for a stolen or illegal terminal. That is, the blacklist database 530 stores only the IMEI to which the theft and copy signals are commonly transmitted to each operator.

When the IMEI inquiry processing unit 540 receives an IMEI authentication request message from the EIR through the communication unit 510, the IMEI inquiry processing unit 540 inquires whether the IMEI exists in the black list database 530. If the IMEI does not exist in the black list database 530, the IMEI inquiry processing unit 540 indicates that the user terminal corresponding to the IMEI is a third party terminal, a terminal manufacturer's own distribution terminal, or a terminal purchased by an individual from abroad. If it is determined that it is, the IMEI authentication result is transmitted to white.

If the inquiry result, the IMEI exists in the blacklist database 530, the IMEI inquiry processing unit 540 transmits the IMEI authentication result in black.

The IMEI information registration unit 550 registers the IMEI not present in the blacklist database 530 in the IMEI information database 520 as a result of the inquiry of the IMEI inquiry processing unit 540 and registers the IMEI with the device identification register. Ask. That is, the IMEI information registration unit 550 registers the IMEI in its own IMEI information database in order to prevent the above process from being repeatedly performed when a terminal authentication request is received for the same IMEI in the future, and the IMEI with the EIR. Request registration.

5 is a diagram illustrating a terminal authentication method using a blacklist authentication method according to the present invention.

Referring to FIG. 5, the EIR receives IMEI information from the subscriber management device (S502) and registers the IMEI information in the IMEI information database (S504). The EIR manages IMEI and status information for each IMEI of the user terminal for terminal authentication, and the status of the IMEI is divided into black, white, and gray. Here, Black means a state that cannot be used in the network due to theft, loss, etc., White means a normal use state, Gray means a state that requires management for reasons such as network operation.

When the user terminal requests the exchange to register the location for using the mobile communication service in the state where S504 is performed (S506), the exchange transmits an authentication request message including the IMEI of the user terminal to the EIR (S508). . That is, when the location registration is requested from the user terminal, the exchange transmits an authentication request message on whether to use the terminal to the EIR by using the IMEI of the user terminal.

Then, the EIR searches the IMEI information database and determines whether there is an IMEI that matches the IMEI included in the authentication request message (S510).

If there is an IMEI that matches the determination result of S510, the EIR checks the state of the IMEI and transmits an authentication request response message including the state information to the exchange (S512). That is, the EIR transmits a response message for the authentication request to the exchange by displaying white when the IMEI state is white and black when black when the matching IMEI exists.

Then, the exchange transmits an authentication request response from the EIR to the user terminal, and the user terminal is allowed to use the terminal according to the authentication request response. That is, the exchange permits the user terminal to use the user terminal when the IMEI state is White, and performs a subsequent procedure for location registration. When the IMEI state is Black, the exchange determines that the user terminal cannot be used in the network. Notify the user terminal of the authentication failure of the terminal.

If there is no IMEI that matches the determination result of S510, the EIR recognizes that the user terminal is not its own terminal and requests IMEI authentication from the subscriber management apparatus (S514).

Then, the subscriber management apparatus queries the blacklist database and checks whether the IMEI exists (S516). Then, the subscriber management apparatus transmits an IMEI authentication result including the test result to the EIR (S518), and the EIR transmits an authentication request response message to the exchange (S520).

That is, the subscriber management device transmits the IMEI authentication result to the EIR in black if the IMEI is in the blacklist database, or white if the IMEI is in the black list database, and the EIR responds to the authentication request as the result of the authentication request of the user terminal. A message is generated and sent to the exchange.

In order to prevent the above process from being repeatedly performed when the terminal authentication request for the same IMEI comes back in the future, the subscriber management apparatus registers the IMEI in its own IMEI information database (S522), and the EIR of the IMEI. Request registration (S524).

Then, the EIR registers the IMEI information in the IMEI information DB (S526). The registered IMEI information transmits an authentication result through its own DB inquiry when a terminal authentication request for the same IMEI comes in the future.

As such, those skilled in the art will appreciate that the present invention can be implemented in other specific forms without changing the technical spirit or essential features thereof. Therefore, the above-described embodiments are to be understood as illustrative in all respects and not as restrictive. The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

The present invention is a terminal authentication by a blacklist authentication method that can process authentication for call processing in the case of a terminal that is distributed through its own agent by a terminal manufacturer or a terminal that is purchased from abroad by a terminal manufacturer. Applicable to the system and method.

200: user terminal 300: switchboard
400: EIR 410, 510: communication unit
420, 520: IMEI information database
430: authentication processing unit 440, 550: IMEI information registration unit
500: subscriber management device 530: blacklist DB
540: IMEI inquiry processing unit

Claims (12)

When the location registration is requested from the user terminal, an exchange requesting the authentication request message including the device identification information of the user terminal to the device identification register, and receives the authentication request response message from the device identification register to provide the user terminal ;
When the authentication request message is received from the exchange, it is determined whether the device identification information exists in the device identification information database. If not, the device identification information authentication request message is transmitted to the subscriber management device to authenticate the device identification information. A device identifier register for receiving a result; And
When the device identification information authentication request message is received from the device identification register, it is checked whether the device identification information exists in the blacklist database, and the device identification information authentication result according to the inspection result is transmitted to the device identification register. Subscriber management device;
Terminal authentication system according to the blacklist authentication method comprising a. The method of claim 1,
The device identification information is IMEI (International Mobile Equipment Identity) information, the terminal authentication system according to the blacklist authentication method comprising at least one of manufacturer information, model information, serial number. The method of claim 1,
The subscriber management apparatus registers the device identification information in its own device identification information database, and requests the device identification register to register the device identification information. A communication unit for communicating with the exchange and the subscriber management device;
A device identification information database storing device identification information of the user terminals and state information of each device identification information; And
When the authentication request message including the device identification information is received from the exchange, the device identification information database is searched to determine whether the device identification information exists, and if present, the status information of the device identification information is included. An authentication processing unit for transmitting an authentication request response message to the exchange, and if not present, requesting device identification information authentication to the subscriber management apparatus and receiving a device identification information authentication result and transmitting the authentication result to the exchange;
Device identification register comprising a. The method of claim 4, wherein
The device identification information database stores device identification information of the user terminal and state information for each device identification information, and the state of the device identification information is black, which means that the device cannot be used in the network, and white for normal use. ), Device identifier register, characterized in that separated into gray (Grey) meaning the state that needs to be managed. The method of claim 4, wherein
And a device identification information registration unit for storing the device identification information in the device identification information database when the registration of the device identification information is requested from the subscriber management device through the communication unit. The method of claim 4, wherein
And the device identification information authentication result includes status information of the device identification information displayed in white when the device identification information authentication result is not present in the blacklist database of the subscriber management apparatus and black when present. A communication unit for communication with the device identification register;
A blacklist database in which device identification information of terminals in an unavailable state in the network is stored; And
When the device identification information authentication request message is received from the device identification register, it is inquired whether the corresponding device identification information exists in the blacklist database, and the device identification information authentication result according to the inquiry result is sent to the device identification register. A device identification information inquiry processing unit to transmit;
Subscriber management device comprising a. The method of claim 8,
The device identification information registration unit may further include a device identification information registration unit that registers device identification information that does not exist in the blacklist database in the device identification information database and requests registration of the device identification information by the device identification register. Subscriber management device. The method of claim 8,
The device identification information inquiry processing unit determines that the user terminal corresponding to the device identification information is not the own terminal when the device identification information does not exist in the black list database, and transmits the device identification information authentication result in white, and the black If present in the list, subscriber management device characterized in that for transmitting the device identification information authentication result in black. In response to a location registration request from a user terminal, the exchange transmitting an authentication request message including device identification information of the user terminal to a device identification register;
Determining, by the device identification register, whether the device identification information exists in a device identification information database, and if not, transmitting a device identification information authentication request message to a subscriber management device;
Checking, by the subscriber management device, whether the device identification information exists in a blacklist database, and transmitting a device identification information authentication result according to the test result to the device identification register;
Transmitting, by the device identification register, the device identification information authentication result to the exchange as an authentication request response message; And
Determining, by the exchange, whether to allow the use of the user terminal according to the state information of the device identification information included in the authentication request response message, and controlling the use of the user terminal according to the determination;
Terminal authentication method according to the blacklist authentication method comprising a. The method of claim 11,
Controlling the use of the user terminal,
If the state information of the device identification information is white, the user can use the user terminal to perform a later procedure for location registration, and if the state information of the device identification information is black, And a step of notifying the user terminal of the authentication failure, the terminal authentication method according to the blacklist authentication method.

Images