KR20130061517A - User equipment authentication apparatus and method for mobile telecommunication - Google Patents

Abstract

PURPOSE: An authentication device of a mobile communication terminal and a method thereof are provided to improve a handover success rate according to authentication success when a terminal is moved between an LTE network and a WCDMA network. CONSTITUTION: A transmitting unit(210) requests the authentication vector issuance of a terminal to an authentication node of first and second mobile communication networks. If the authentication vector issuance of the terminal is failed, a receiving unit(220) receives an authentication vector of the terminal issued from the authentication node of the first mobile communication terminal. If the authentication vector issuance succeeds, the receiving unit disposes the authentication vector of the terminal issued from the authentication node. [Reference numerals] (210) Transmitting unit; (220) Receiving unit

Description

Device and method for authentication of mobile communication terminal {User Equipment Authentication Apparatus and method for Mobile telecommunication}

The present invention relates to an authentication apparatus and method of a mobile communication terminal, and more particularly, in a process of moving between a third generation mobile communication network and a fourth generation mobile communication network or a circuit switched fallback (CSFB) of a fourth generation (LTE) mobile communication network. The present invention relates to an authentication apparatus and a method for improving the authentication success rate of a terminal in a circuit switched fallback process.

Long Term Evolution (LTE) is being standardized in 3GPP to realize the requirements of high-data-rate, low-latency, and packet-optimized radio-access for access networks. The 3.9G network is designed to accommodate high-speed rich media while ensuring backward compatibility with existing 3GPP / non-3GPP access networks.

LTE is an all-ip based network that excludes existing circuit-switched based communication, and strengthens QoS management to provide real-time services (eg, voice communication, video communication) and non real-time services (eg, web browsing, store and forward data). By providing differentiated QoS for transmission, the efficiency of network resources is improved.

In addition, by introducing a smart antenna technology (i.e., MIMO) to extend the bandwidth for wireless communication.

FIG. 1 is a diagram conceptually illustrating a configuration of a third generation (WCDMA) mobile communication network and a fourth generation (LTE) mobile communication network.

The fourth generation (LTE) mobile communication network is divided into an Evolved Universal Terrestrial Radio Access Network (E-UTRAN) part and an Evolved Packet Core (EPC), and an eNodeB 170 serving as a base station in the E-UTRAN. And the EPC includes LTE core network nodes, such as a mobility management entity (MME) 180.

The MME 120 is responsible for authentication and registration of the UE 100 when the UE 100 accesses a mobile communication network, processes a service request from the UE 100, and the UE 100 moves between the eNodeBs 170. Ensure mobility when.

The third generation (WCDMA) mobile communication network is composed of a universal terrestrial radio access network (UTRAN), a packet switched (PS) core network, and a CS core network.

 The Universal Terrestrial Radio Access Network (UTRAN) includes a NodeB 110 serving as a base station and a Radio Network Controller (RNC) 120 controlling the base stations, and a packet switching support node (SGSN) in the PS core network. 130, and nodes that provide packet services, such as a Gateway GPRS Support Node (GGSN) (not shown).

The Serving GPRS Service Node (SGSN) 130 is responsible for authentication and registration of the UE 100 in the WCDMA network, processes service requests from the UE 100, and when the UE 100 moves between BSs or NodeBs. Ensure mobility

A mobility management entity (MME) 180 and a packet switching support node (SGSN: Serving GPRS Service Node) 130 are linked through a public IP network 160 for packet service continuity and terminal information delivery. Terminal information (authentication vector, PDP context, etc.) can be transmitted and received.

As the authentication information, which should be secured, is transmitted and received through the public IP network 160, data may be modulated by a third party and some data may be lost on the transmission path.

Circuit Switched Fallback (CSFB) function operation for the UE 100 to transmit and receive voices during 4G (LTE: Long Term Evolution) mobile communication and 3G (WCDMA) mobile communication network or LTE network Routing Area Update or Tracking Area Update

When the UE 100 transitions from the LTE network to the WCDMA network, the terminal 100 performs an authentication process during the Routing Area Update procedure. A core network node, a Serving GPRS Service Node (SGSN), and a mobility management entity (MME: Mobility Management) Entity), data modulation may occur in the process of transmitting terminal authentication information.

Data modulation occurring in the process of transmitting terminal authentication information between core network nodes causes terminal authentication failure, and the Routing Area Update process fails.

The technical problem to be achieved by the embodiment of the present invention, the authentication of the terminal in the Routing Area Update (RAU) process of the third generation mobile communication network or the Tracking Area Update (TAU) process of the fourth generation (LTE) mobile communication network to solve the above problems It is to provide an authentication apparatus and method that can improve the success rate.

According to an aspect of the present invention, there is provided an apparatus for authenticating a mobile communication terminal, comprising: a transmitter for requesting an authentication vector of a terminal from an authentication node of a first mobile communication network and an authentication node of a second mobile communication network; And when the issuance of the authentication vector of the terminal fails from the authentication node of the second mobile communication network, receives the authentication vector of the terminal issued from the authentication node of the first mobile communication network, and receives the terminal from the authentication node of the second mobile communication network. And a receiving unit for discarding the authentication vector of the terminal issued from the authentication node of the first mobile communication network when the authentication vector is issued successfully.

Preferably, the request for issuing the authentication vector of the terminal performs location registration update during handover from the first mobile communication network to the second mobile communication network, or the first mobile communication network or the second mobile communication network is the fourth generation (LTE: Long). Term Evolution) In the case of a mobile communication network, a location registration update of a circuit switched fallback (CSFB) for incoming or outgoing voice signal is performed.

Preferably, the first mobile communication network and the second mobile communication network are one of a third generation (WCDMA) mobile communication network or a fourth generation (LTE) long communication network (LTE). The second mobile communication network may be different mobile communication networks.

Preferably, the request for issuing the authentication vector of the terminal from the authentication node of the first mobile communication network of the originator is based on the registration position of the terminal registered with the authentication node of the second mobile communication network. The node ID (ID) of the and characterized in that made by searching the IP (IP) address of the terminal.

Preferably, when the second mobile communication network is a third generation (WCDMA) mobile communication network, an authentication node of the second mobile communication network is a Serving GPRS Service Node (SGSN). The failure of issuing the authentication vector is to maintain the authentication vector issuing flag of the Serving GPRS Service Node (SGSN) in the OFF state. The authentication vector issuing flag of the SGSN: Serving GPRS Service Node is maintained in an ON state, and the registration position of the terminal is recognized as a routing area identifier (RAI) message.

Preferably, when the second mobile communication network is a fourth generation (LTE) mobile communication network, the authentication node of the second mobile communication network is a mobility management entity (MME). The failure is that the authentication vector issuance flag of the mobility management entity (MME) remains OFF, and the success of the authentication vector issuance of the terminal is the authentication vector of the mobility management entity (MME). The issuing flag is maintained in an ON state, and the registration location of the terminal is recognized as a TAI (Tracking Area Identifier) message.

Preferably, the receiver performs authentication of the terminal based on the authentication vector of the terminal, wherein the location registration update is characterized in that the tracking area update (TAU) or routing area update (RAU).

The authentication method of the mobile communication terminal according to an embodiment of the present invention for achieving the technical problem, the authentication vector request step of requesting the authentication vector of the terminal to the authentication node of the first mobile communication network and the authentication node of the second mobile communication network ; And when the issuance of the authentication vector of the terminal fails from the authentication node of the second mobile communication network, receives the authentication vector of the terminal issued from the authentication node of the first mobile communication network, and receives the terminal from the authentication node of the second mobile communication network. When the issuance of the authentication vector is successful, the authentication vector receiving step of discarding the authentication vector of the terminal issued from the authentication node of the first mobile communication network; characterized in that it comprises a.

Preferably, the request for issuing the authentication vector of the terminal performs location registration update during handover from the first mobile communication network to the second mobile communication network, or the first mobile communication network or the second mobile communication network is the fourth generation (LTE: Long). Term Evolution) In the case of a mobile communication network, a location registration update of a circuit switched fallback (CSFB) for incoming or outgoing voice signal is performed.

Preferably, the first mobile communication network and the second mobile communication network are one of a third generation (WCDMA) mobile communication network or a fourth generation (LTE) long communication network (LTE). The second mobile communication network may be different mobile communication networks.

Preferably, the request for issuing the authentication vector of the terminal from the authentication node of the first mobile communication network in the authentication vector requesting step is performed in the first mobile communication network based on the registration position of the terminal registered in the authentication node of the second mobile communication network. It characterized in that the node ID (ID) of the terminal and the IP (IP) address of the terminal is searched.

Preferably, when the second mobile communication network is a third generation (WCDMA) mobile communication network, an authentication node of the second mobile communication network is a Serving GPRS Service Node (SGSN). The failure of issuing the authentication vector is to maintain the authentication vector issuing flag of the Serving GPRS Service Node (SGSN) in the OFF state. The authentication vector issuing flag of the SGSN: Serving GPRS Service Node is maintained in an ON state, and the registration position of the terminal is recognized as a routing area identifier (RAI) message.

Preferably, when the second mobile communication network is a fourth generation (LTE) mobile communication network, the authentication node of the second mobile communication network is a mobility management entity (MME). The failure is that the authentication vector issuance flag of the mobility management entity (MME) remains OFF, and the success of the authentication vector issuance of the terminal is the authentication vector of the mobility management entity (MME). The issuing flag is maintained in an ON state, and the registration location of the terminal is recognized as a TAI (Tracking Area Identifier) message.

Preferably, the receiving of the authentication vector may perform authentication of the terminal based on the authentication vector of the terminal, and the location registration update may be a tracking area update (TAU) or a routing area update (RAU).

According to the authentication apparatus and method of a mobile communication terminal according to the present invention, there is an effect that the terminal can improve the handover success rate according to the authentication success when moving between the LTE network and the WCDMA network.

According to the authentication apparatus and method of a mobile communication terminal according to the present invention, there is an effect of reducing signaling traffic due to frequent location registration that occurs when authentication fails.

According to the authentication apparatus and method of a mobile communication terminal according to the present invention, an authentication procedure method operator setting function suitable for a wireless environment can be provided.

FIG. 1 is a diagram conceptually illustrating a configuration of a third generation (WCDMA) mobile communication network and a fourth generation (LTE) mobile communication network.
2 is a view showing the configuration of an authentication device for a mobile communication terminal according to the present invention.
3 is a flowchart illustrating an authentication method of a mobile communication terminal according to the present invention.
4 is a diagram illustrating the configuration of a mobility management entity (MME) in an authentication apparatus and method of a mobile communication terminal according to the present invention.
FIG. 5 is a diagram illustrating a setting of a Serving GPRS Service Node (SGSN) in an authentication apparatus and method of a mobile communication terminal according to the present invention.
FIG. 6 is a diagram illustrating a tracking area update (TAU) process in a fourth generation (LTE) mobile communication network.
7 is a flowchart illustrating a routing area update (RAU) process in a third generation (WCDMA) mobile communication network using an authentication apparatus and method of a mobile communication terminal according to the present invention.
8 is a flowchart illustrating a tracking area update (TAU) process in a fourth generation (LTE) mobile communication network using an authentication apparatus and method of a mobile communication terminal according to the present invention.

In order to fully understand the present invention, operational advantages of the present invention, and objects achieved by the practice of the present invention, reference should be made to the accompanying drawings and the accompanying drawings which illustrate preferred embodiments of the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, the present invention will be described in detail with reference to the preferred embodiments of the present invention with reference to the accompanying drawings. Like reference symbols in the drawings denote like elements.

2 is a view showing the configuration of an authentication device for a mobile communication terminal according to the present invention.

The authentication apparatus 200 of the mobile communication terminal according to the present invention includes a transmitter 210 and a receiver 220.

The transmitting unit 210 requests issuance of the authentication vector of the terminal to the authentication node of the first mobile communication network and the authentication node of the second mobile communication network.

The first and second mobile communication networks are either a third generation (WCDMA) mobile communication network or a fourth generation (LTE) mobile communication network, and the first and second mobile communication networks. Are different mobile networks.

When the first mobile communication network is a third generation (WCDMA) mobile communication network, the authentication node of the WCDMA mobile communication network becomes a Serving GPRS Service Node (SGSN).

When the second mobile communication network is a fourth generation (LTE) mobile communication network, the authentication node of the LTE mobile communication network is a mobility management entity (MME).

The authentication vector is a message for requesting information required for authentication of the terminal.

Receiving unit 220 receives the authentication vector of the terminal issued from the authentication node of the first mobile communication network when the issuance of the authentication vector of the terminal from the authentication node of the second mobile communication network, the authentication of the terminal from the authentication node of the second mobile communication network If the vector is issued successfully, the authentication vector of the terminal issued from the authentication node of the first mobile communication network is discarded and the authentication vector issued from the authentication node of the second mobile communication network is used for the terminal authentication.

In the present invention, the request for issuing the authentication vector of the terminal may be performed by performing a location registration update during handover from the first mobile communication network to the second mobile communication network, or the first mobile communication network or the second mobile communication network is the fourth generation (LTE: Long Term). In the case of a mobile communication network, a location registration update of a circuit switched fallback (CSFB) for incoming or outgoing voice signal is performed.

Specifically, the location registration update refers to a tracking area update (TAU) process in an LTE mobile communication network, and a routing area update (RAU) process in a WCDMA mobile communication network.

Circuit Switched Fallback (CSFB) is a 4G generation LTE network. When a voice call is received or a call is made, the voice call signal is disconnected from the 4G LTE connection, and the 3G WCDMA or It means to fall back to CS domain such as 2G GSM.

In case that the second mobile communication network is a third generation (WCDMA) mobile communication network, it is an authentication node that the authentication vector of the terminal fails to issue a packet switching support node (SGSN). This means that the issuance of the authentication vector is not performed because the authentication vector issuing flag of the is maintained OFF.

In addition, the successful issuance of the authentication vector of the terminal means that the authentication vector issuing flag of the packet switching support node (SGSN: Serving GPRS Service Node), which is an authentication node, remains ON. .

If the second mobile communication network is a fourth generation (LTE) mobile communication network, the failure of issuing the authentication vector of the terminal in the authentication node issuing the authentication vector of the mobility management entity (MME). This means that the flag is OFF and no authentication vector is issued.

In addition, the successful issuance of the authentication vector of the terminal means that the authentication vector issuing flag of the mobility management entity (MME: Mobility Management Entity), which is an authentication node, remains ON.

3 is a flowchart illustrating an authentication method of a mobile communication terminal according to the present invention.

The terminal requests issuance of the authentication vector of the terminal from the authentication node of the first mobile communication network and the authentication node of the second mobile communication network (S310).

When issuance of the authentication vector of the terminal fails from the authentication node of the second mobile communication network When receiving the authentication vector of the terminal issued from the authentication node of the first mobile communication network, and issuing the authentication vector of the terminal from the authentication node of the second mobile communication network The authentication vector of the terminal issued from the authentication node of the first mobile communication network is discarded and the authentication vector issued from the authentication node of the second mobile communication network is used for terminal authentication (S320).

4 is a diagram illustrating the configuration of a mobility management entity (MME) in an authentication apparatus and method of a mobile communication terminal according to the present invention.

When the terminal performs location registration update during handover from the first mobile communication network to the second mobile communication network, and the first mobile communication network or the second mobile communication network is a fourth generation (LTE) mobile communication network, a voice signal Location registration update is required during circuit switched fallback (CSFB) process for incoming or outgoing calls.

The registration location of the terminal can be known by a TAI (Tracking Area Identifier) message.

The authentication vector issuance in the MME of the LTE mobile communication network is normally performed when the authentication vector issuing flag 450 is kept in an ON state, but the authentication vector issuing flag 450 is maintained in an OFF state. If there is, issuance of the authentication vector fails, for this purpose, the location registration signaling is repeatedly performed to increase traffic.

In order to solve this problem, the present invention receives an authentication vector issued by SGSN 410, which is an authentication node of WCDMA mobile communication network, which is a Correspondent Node, and utilizes it for terminal authentication to solve the problem of traffic increase. will be.

In order to issue the authentication vector of the terminal from the authentication node, SGSN, of the WCDMA mobile communication network, the node ID of the terminal in the WCDMA mobile communication network is based on the authentication node of the LTE mobile communication network, the registration location (TAI) of the terminal registered in the MME. The ID 420 and the IP address 430 of the terminal are searched for.

The Node ID 420 arbitrarily assigns and sets the node identifier 410.

The ID bands of the LTE power node and the WCDMA power node are divided and allocated.

The IP address 430 means an IP address of a terminal in a WCDMA network that is a large node.

The Last visited TAI List 440 means a TAI List registered in the MME of LTE, which is a neighbor cell.

The authentication vector issuing flag 450 indicates an ON / OFF state for issuing a new authentication vector in the MME of the LTE mobile communication network.

FIG. 5 is a diagram illustrating a setting of a Serving GPRS Service Node (SGSN) in an authentication apparatus and method of a mobile communication terminal according to the present invention.

 The registration location of the terminal in the WCDMA mobile communication network is identified by a routing area identifier (RAI) message.

The authentication vector issuance in SGSN of the WCDMA mobile communication network is normally performed when the authentication vector issuing flag 550 remains ON, but the authentication vector issuing flag 550 remains OFF. If there is, issuance of the authentication vector fails, for this purpose, the location registration signaling is repeatedly performed to increase traffic.

In order to solve this problem, the present invention receives an authentication vector issued from the MME 510, which is an authentication node of an LTE mobile communication network, which is a Correspondent Node, and utilizes it for terminal authentication to solve the problem of increased traffic. will be.

In order to issue the authentication vector of the terminal from the authentication node and the MME of the LTE mobile communication network, the node ID of the terminal in the LTE mobile communication network is based on the registration position (RAI) of the terminal registered in the authentication node, SGSN, and the WCDMA mobile communication network. The ID 520 and the IP address 530 of the terminal are searched for.

The Node ID 520 randomly assigns and sets the node identifier 510.

The ID bands of the LTE power node and the WCDMA power node are divided and allocated.

The IP address 530 refers to an IP address of a terminal in an LTE network which is a large node.

The Old RAI List 540 means a RAI List registered in SGSN of WCDMA, which is a neighbor cell.

The authentication vector issuing flag 550 indicates an ON / OFF state for issuing a new authentication vector in SGSN of the WCDMA mobile communication network.

FIG. 6 is a diagram illustrating a tracking area update (TAU) process in a fourth generation (LTE) mobile communication network.

When the LTE terminal (UE) 660-1 is in an active state (communicating state, EMM-Registered / ECM-Connected / RRC-Connected state in LTE terminology), the LTE network determines the location of the UE. Understand in units.

In other words, it determines which cell of which eNB is located.

However, if the UE is in Idle state (no communication state, EMM-Registered / ECM-Idle / RRC-Idle state in LTE terminology), the LTE network can track the location of the UE, not in cell units. ) In units.

The service provider defines several TAs by grouping several adjacent eNBs into one TA. The TA is already determined when the network is initially deployed.

Each eNB is preset to which TA it belongs to.

In FIG. 6, for example, eNBs 620-1 located in Samseong-dong TA1 640, eNBs 620-2 located in Yeoksam-dong TA2 650, and eNBs 620-3, 620-4 located in Nonhyeon-dong TA3. Set to (660).

When the UE 610-1 is in an idle state where no communication is made and traffic to the UE occurs (traffic from the Internet to the UE), the LTE network must wake up the UE to receive data. This waking behavior is called paging, and TA is the unit for paging.

So if the UE in Idle is located in Nonhyeon-dong and the network knows the UE location as TA3 (660) and the data comes to the UE to wake up, the network sends a paging message to all eNBs belonging to TA3. The received eNBs 610-2 wake up the UE by sending a paging message over the radio section.

The format of the TA consists of a tracking area identifier (TAI) and a tracking area code (TAC).

TAC 670 is a unique value assigned to each TA by the service provider (eg, Samsung-dong TA1 (640) = 0x0001, Yeoksam-dong (650) TA2 = 0x0002). The TAI 660 is composed of PLMN ID + TAC, and this PLMN ID is composed of MCC + MNC.

This PLMN ID is a unique ID assigned to each mobile carrier. In Korea, MCC (Mobile Country Code) is assigned to 450, and SKT in Korea has MNC (Mobile Network Code) assigned to 05.

That is, the Korean mobile carrier SKT has MCC = 450 and MNC = 05, so that TAI becomes an identifier to have a unique TA value.

The MME 630 should always have up-to-date location information on which TA the UE in idle state is located in.

Therefore, whenever the TA is changed, the UE 610 reports to the MME that the TA has been changed through a TAU message.

The UE receives the TA List when accessing the LTE network and {TAC1, TAC2} in FIG. This means that the UE does not need to send a TAU message to the MME when it is in TA1, TA2, but instead sends a TAU Request message to the MME when moving to a location other than TA1 and TA2 (ex. TA3).

When the MME gives a TAU Accept to the UE, the MME also gives the TAI List, and updates the TAI List accordingly as the UE moves.

7 is a flowchart illustrating a routing area update (RAU) process in a third generation (WCDMA) mobile communication network using an authentication apparatus and method of a mobile communication terminal according to the present invention.

An apparatus and method for authenticating a terminal according to the present invention is to solve a conventional problem in performing authentication of a terminal based on an authentication vector of a terminal during a tracking area update (TAU) or a routing area update (RAU) process of location registration update. will be.

If the UE moves out of LTE network cell coverage, a fourth generation mobile communication network, to a WCDMA network cell, a third generation mobile communication network, or attempts to make a voice call during LTE connection, the terminal performs a Routing Area Update process. It performs (S710).

The WCDMA SGSN searches for an MME Node ID and an IP address, which is a power node with an Old RAI value of a Routing Area Update message, and then requests terminal information (authentication vector, PDP context, etc.) from the MME (S720, S730, and S740).

If the SGSN issuance flag is "ON" (S750) SGSN requests the terminal authentication vector to the AUC (S760) and discards the terminal authentication vector received from the MME (S770).

If the authentication vector issuing flag is "OFF", the terminal authentication vector received from the MME is used (S780).

The SGSN performs a RAU process if the terminal authentication process succeeds, and processes an RAU failure if the terminal authentication process fails (S790).

8 is a flowchart illustrating a tracking area update (TAU) process in a fourth generation (LTE) mobile communication network using an authentication apparatus and method of a mobile communication terminal according to the present invention.

When the terminal moves from the WCDMA cell to the LTE cell or terminates the voice call by the CSFB function during the LTE connection, the terminal performs a tracking area update process (S810).

The LTE MME searches for the SGSN Node ID and IP address with the Last visited TAI value of the Tracking Area Update message and then requests terminal information (authentication vector, PDP context, etc.) to the SGSN (S820, 830, 840).

If the authentication vector issuance flag is "ON" (S850), the MME requests the terminal authentication vector to the AUC (S860) and discards the terminal authentication vector received from the SGSN (S870).

If the authentication vector issuing flag is "OFF", the terminal authentication vector received from SGSN is used (S880).

If the terminal authentication process is successful, the MME performs a TAU process, and if the terminal authentication process fails, it processes the TAU failure (S890).

As described above, optimal embodiments have been disclosed in the drawings and the specification. Although specific terms have been employed herein, they are used for purposes of illustration only and are not intended to limit the scope of the invention as defined in the claims or the claims. Therefore, those skilled in the art will appreciate that various modifications and equivalent embodiments are possible without departing from the scope of the present invention. Accordingly, the true scope of the present invention should be determined by the technical idea of the appended claims.

Claims (14)

A transmitter for requesting issuance of an authentication vector of a terminal to an authentication node of a first mobile communication network and an authentication node of a second mobile communication network; And
When issuing of the authentication vector of the terminal fails from the authentication node of the second mobile communication network, receives the authentication vector of the terminal issued from the authentication node of the first mobile communication network, and receives the authentication vector of the terminal from the authentication node of the second mobile communication network. And a receiving unit for discarding the authentication vector of the terminal issued from the authentication node of the first mobile communication network when issuing the authentication vector is successful. The method of claim 1, wherein the request for issuing the authentication vector of the terminal
Receiving a voice signal when performing location registration update during handover from a first mobile communication network to a second mobile communication network, or when the first mobile communication network or the second mobile communication network is a fourth generation (LTE) mobile communication network Or during the location registration update of a circuit switched fallback (CSFB) for outgoing call. The method of claim 1,
The first mobile communication network and the second mobile communication network are either third generation (WCDMA) mobile communication networks or fourth generation (LTE) mobile communication networks, and the first mobile communication network and the second mobile communication network. The mobile communication network is a different mobile communication network, characterized in that the authentication device of the mobile communication terminal. According to claim 1, wherein the transmitting unit
The request for issuing the authentication vector of the terminal from the authentication node of the first mobile communication network
Characterized in that the node ID (ID) of the terminal and the IP address of the terminal in the first mobile communication network are searched based on the registered position of the terminal registered in the authentication node of the second mobile communication network. Authentication apparatus of a mobile communication terminal. The method of claim 4, wherein
When the second mobile communication network is a third generation (WCDMA) mobile communication network, the authentication node of the second mobile communication network is a packet switching support node (SGSN) and issuing an authentication vector of the terminal. The failure of SSGSN is that the authentication vector issuing flag of the Serving GPRS Service Node (SGSN) remains OFF, and the success of the issuance of the authentication vector of the terminal is SGSN: Serving. The authentication vector issuing flag of the GPRS Service Node is maintained in an ON state, and the registration position of the terminal is recognized as a Routing Area Indentifier (RAI) message. The method of claim 4, wherein
When the second mobile communication network is a fourth generation (LTE) mobile communication network, the authentication node of the second mobile communication network is a mobility management entity (MME). The authentication vector issuance flag of the management entity (MME: Mobility Management Entity) is maintained in an OFF state, and the success of the authentication vector issuance of the terminal is the authentication vector issuance flag of the mobility management entity (MME). And maintains an ON state, and the registered position of the terminal is recognized as a tracking area identifier (TAI) message. The method of claim 2, wherein the receiving unit
Perform authentication of the terminal based on the authentication vector of the terminal,
Wherein the location registration update is a tracking area update (TAU) or a routing area update (RAU). An authentication vector requesting step of requesting an authentication vector of a terminal to an authentication node of a first mobile communication network and an authentication node of a second mobile communication network; And
When issuing of the authentication vector of the terminal fails from the authentication node of the second mobile communication network, receives the authentication vector of the terminal issued from the authentication node of the first mobile communication network, and receives the authentication vector of the terminal from the authentication node of the second mobile communication network. And an authentication vector receiving step of discarding the authentication vector of the terminal issued from the authentication node of the first mobile communication network when the authentication vector issuance is successful. The method of claim 8, wherein the authentication vector issuance request of the terminal is
Receiving a voice signal when performing location registration update during handover from a first mobile communication network to a second mobile communication network, or when the first mobile communication network or the second mobile communication network is a fourth generation (LTE) mobile communication network Or performing a location registration update of a circuit switched fallback (CSFB) for outgoing call. The method of claim 8,
The first mobile communication network and the second mobile communication network are either third generation (WCDMA) mobile communication networks or fourth generation (LTE) mobile communication networks, and the first mobile communication network and the second mobile communication network. The mobile communication network is a different mobile communication network, characterized in that the authentication method of the mobile communication terminal. The method of claim 8, wherein
The request for issuing the authentication vector of the terminal from the authentication node of the first mobile communication network
Characterized in that the node ID (ID) of the terminal and the IP address of the terminal in the first mobile communication network are searched based on the registered position of the terminal registered in the authentication node of the second mobile communication network. Authentication method of a mobile communication terminal. The method of claim 11,
When the second mobile communication network is a third generation (WCDMA) mobile communication network, the authentication node of the second mobile communication network is a packet switching support node (SGSN) and issuing an authentication vector of the terminal. The failure of SSGSN is that the authentication vector issuing flag of the Serving GPRS Service Node (SGSN) remains OFF, and the success of the issuance of the authentication vector of the terminal is SGSN: Serving. The authentication vector issuing flag of the GPRS Service Node is maintained in an ON state, and the registration position of the terminal is recognized as a Routing Area Indentifier (RAI) message. The method of claim 11,
When the second mobile communication network is a fourth generation (LTE) mobile communication network, the authentication node of the second mobile communication network is a mobility management entity (MME). The authentication vector issuance flag of the management entity (MME: Mobility Management Entity) is maintained in an OFF state, and the success of the authentication vector issuance of the terminal is the authentication vector issuance flag of the mobility management entity (MME). Maintaining an ON state and the registration position of the terminal is recognized as a Tracking Area Identifier (TAI) message. The method of claim 9, wherein the authentication vector receiving step
And authenticating the terminal based on the authentication vector of the terminal, wherein the location registration update is a tracking area update (TAU) or a routing area update (RAU).

Images