Authentication system and method having mobility in public wireless local area network

• US 20050286489A1
• Filed: 10/24/2002
• Published: 12/29/2005
• Est. Priority Date: 04/23/2002
• Status: Abandoned Application

• Current Assignee: SK Telecom Co., Ltd.
• Original Assignee: SK Telecom Co., Ltd.
• Inventors: Bhang, Chan-Jeom, Shin, Yonk-Sik, Lee, Dong-Hahk, Ryu, Si-Hoon
• Application Number:
  US10/510,728
• Publication Number:
  US 20050286489A1
• Time in Patent Office: Days
• US Class Current: 370/352
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 36/0038 of security context information
• CPC Class Codes: H04W 4/24 Accounting or billing
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

The present invention discloses an authentication system and method having mobility in a public wireless LAN. The authentication system includes an access point for requesting authentication of a wireless terminal to an access point manager, enabling data transmission and reception of the authenticated wireless terminal, and requesting the access point manager to charge the wireless terminal, and the access point manager for authenticating the wireless terminal which has already been authenticated on the basis of previously-registered registration information upon the request of the access point, authenticating the wireless terminal which has not been registered through an authentication server of a wireless network operator, and transmitting the authentication information to the access point. As a result, the wireless terminal can continuously access the network through the access points of the same subnet as well as different subnet without re-authentication, thereby achieving mobility and processing charging.

Claims

1. An authentication system having mobility in a public wireless LAN which processes authentication and charging through an authentication server of a wireless network operator, comprising:

an access point wirelessly connected to a wireless terminal, for outputting an authentication request message or charging request message added with information of the wireless terminal and requesting authentication and charging of the wireless terminal, and receiving an authentication response message and controlling data transmission and reception of the authenticated wireless terminal; and

an access point manager for receiving the authentication request message for the wireless terminal from the access point, confirming whether the wireless terminal has already been authenticated, transmitting the authentication request message to the authentication server of the wireless network operator and transmitting the received authentication response message to the access point when the wireless terminal has not been authenticated, and transmitting the authentication response message to the access point on the basis of the registered authentication information when the wireless terminal has been authenticated.

2. The system according to claim 1, wherein the access point adds a MAC address and IP address of the wireless terminal which needs authentication to the authentication request message and transmits the resultant message.

3. The system according to claim 1, wherein the access point adds an IP address of the access point which requests authentication to the authentication request message and transmits the resultant message.

4. The system according to claim 1, wherein the access point adds a user ID and password from the wireless terminal which needs authentication to the authentication request message and transmits the resultant message.

5. The system according to claim 1, wherein the access point confirms whether the wireless terminal is newly authenticated or has already been authenticated on the basis of the authentication information included in the authentication response message.

6. The system according to claim 1, wherein, when the access point confirms that the wireless terminal is newly authenticated on the basis of the authentication information included in the authentication response message, the access point transmits a charging start request message to the access point manager to start charging the authenticated wireless terminal.

7. The system according to claim 1, wherein, when the access point transmits the charging start request message to start charging the authenticated wireless terminal, the access point controls data transmission and reception of the authenticated wireless terminal.

8. The system according to claim 1, wherein the access point transmits status information of the wireless terminal to the access point manager after transmitting the charging start request message.

9. The system according to claim 1, wherein, when a logoff request is received from the wireless terminal or time-out is generated, the access point transmits a charging stop request message to the access point manager to stop charging.

10. The system according to claim 1, wherein, when the access point manager receives the authentication request message from the access point, the access point manager confirms whether the wireless terminal has already been authenticated.

11. The system according to claim 1, wherein, when the access point manager confirms that the wireless terminal has not been authenticated on the basis of the authentication request message, the access point manager transmits the authentication request message to the authentication server of the wireless network operator for authentication.

12. The system according to claim 1, wherein, when the access point manager confirms that the wireless terminal is newly authenticated, the access point manager adds new authentication information to the authentication response message, and transmits the resultant message to the access point.

13. The system according to claim 1, wherein, when the access point manager confirms that the wireless terminal has already been authenticated on the basis of the authentication request message, the access point manager directly authenticates the wireless terminal on the basis of the registered authentication information.

14. The system according to claim 1, wherein, when the wireless terminal has already been authenticated, the access point manager adds previous authentication information to the authentication response message, and transmits the resultant message to the access point.

15. The system according to claim 1, wherein, when the access point manager receives a charging start request message for the wireless terminal from the access point, the access point manager transmits the charging start request message to the authentication server to start charging.

16. The system according to claim 1, wherein, when the access point manager receives a charging stop request message for the wireless terminal from the access point, the access point manager transmits the charging stop request message to the authentication server to stop charging.

17. An authentication method having mobility in a public wireless LAN which receives an authentication or charging request message for a wireless terminal from an access point and processes authentication and charging through an authentication server of a wireless network operator, comprising:

an authentication step for receiving the authentication request message from the access point, authenticating the wireless terminal on the basis of the authentication request message, and transmitting an authentication response message to the corresponding access point; and

a charging step for receiving the charging request message from the access point and transmitting the received charging request message to the authentication server, and receiving a charging request response message from the authentication server and transmitting the received charging request response message to the access point.

18. The method according to claim 17, wherein the authentication step comprises the steps of:

deciding whether the wireless terminal has already been authenticated on the basis of the authentication request message received from the access point;

transmitting the authentication response message to the access point on the basis of the previously-registered authentication information, when the wireless terminal has already been authenticated; and

obtaining authentication from the authentication server and transmitting the authentication response message to the access point, when the wireless terminal has not been authenticated.

19. The method according to claim 18, wherein the step for obtaining authentication from the authentication server and transmitting the authentication response message to the access point comprises a step for registering wireless terminal information, access point information and authentication information.

20. The method according to claim 18, wherein the step for transmitting the authentication response message to the access point on the basis of the previously-registered authentication information comprises a step for renewing the access point information on the basis of the received authentication request message.

21. The method according to claim 18, wherein the step for transmitting the authentication response message comprises a step for adding information on whether the wireless terminal is newly authenticated or has already been authenticated to the authentication response message.

22. An authentication method having mobility in a public wireless LAN where an access point requests authentication and charging of a wireless terminal through an access point manager, comprising:

a step for the access point to be wirelessly connected to the wireless terminal;

an authentication request step for adding information of the wireless terminal to an authentication request message and transmitting it to the access point manager; and

a step for receiving an authentication response message to the authentication request message transmitted in the authentication request step from the access point manager, and selectively requesting the access point manager to start charging on the basis of the authentication information included in the authentication response message.

23. The method according to claim 22, wherein the step for requesting authentication comprises a step for adding a MAC address and IP address of the wireless terminal to the authentication request message.

24. The method according to claim 22, wherein the step for requesting authentication comprises a step for adding an IP address of the access point to the authentication request message.

25. The method according to claim 22, wherein the step for requesting the access point manager to start charging comprises the steps of:

deciding whether the wireless terminal is newly authenticated on the basis of the received authentication response message;

transmitting a charging start request message to the access point manager to start charging and starting data transmission and reception of the wireless terminal, when the wireless terminal is newly authenticated; and

starting data transmission and reception of the wireless terminal when the wireless terminal has already been authenticated.