Securing quality of service (QoS) according to type of wireless local area network (WLAN) service

• US 8,428,555 B2
• Filed: 09/20/2006
• Issued: 04/23/2013
• Est. Priority Date: 12/29/2005
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Kim, Sung-Jun, Jeon, Seong-Joon, Park, Joo-Yong, Youn, Myeon-Kee
• Primary Examiner(s): Afshar, Kamran
• Assistant Examiner(s): Behnamian, Shahriar
• Application Number:
  US11/523,708
• Publication Number:
  US 20070155365A1
• Time in Patent Office: 2,407 Days
• Field of Search: 370/310, 455/410, 455/452.2
• US Class Current: 455/411
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04M 2203/2066 Call type detection of indication, e.g. voice or fax, mobile of fixed, PSTN or IP
• CPC Class Codes: H04M 2207/18 wireless networks
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 48/02 Access restriction performed under specific conditions
• CPC Class Codes: H04W 74/0875 with assigned priorities based access
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A wireless network system and method to secure Quality of Service (QoS) according to a type of Wireless Local Area Network (WLAN) service in a WLAN communication system based on IEEE 802.11 includes: an authentication server adapted to set a priority for an access category of a wireless network service requested by a user to perform an authentication procedure in response to a user terminal requesting authentication for access to a wireless network; and an Access Point (AP) adapted to receive and store access category information of the user terminal authenticated by the authentication server and to compare access category information contained in a packet received from the user terminal to the previously stored access category information of the user terminal to control access to the wireless network.

Claims

1. A wireless network system, comprising:

an authentication server adapted to set a priority for an access category of a wireless network service requested by a user to perform an authentication procedure in response to a user terminal requesting authentication for access to a wireless network; and

an Access Point (AP) adapted to receive and store access category information of the user terminal authenticated by the authentication server and to compare access category information contained in a packet received from the user terminal to the previously stored access category information of the user terminal to control access of the user terminal to the wireless network,

wherein the access category information comprises at least priority information that involves a content of a fee system with one of AC_VO (Access Category voice), AC_VI (Access Category video), AC_BK (Access Category background), and AC_BE (Access Category best effort),

wherein the AP is adapted to manage a Quality of Service Station (QSTA) list table by receiving access category information of an authorized QSTA from the authentication server, adding the access category information to the QSTA list table, and deleting a disassociated QSTA from the QSTA list table, and

wherein the AP is adapted to transmit the preset access category information to the corresponding user terminal during the authentication procedure with the authentication server and then to sequentially increase a mismatch counter value upon a determination that the access category information contained in a Quality of Service (QoS) control field of the packet received from the

user terminal does not match the access category information of the user terminal stored in the QSTA list table.

2. The system of claim 1, wherein the user terminal is a Quality of Service (QoS) STAtion (QSTA) adapted to perform IEEE 802.11e and IEEE 802.1x functions.

3. The system of claim 2, wherein the QSTA terminal is adapted to set a security protocol with the AP before performing an IEEE 802.1x authentication procedure with the authentication server.

4. The system of claim 2, wherein the authentication server comprises a terminal information transmitting module adapted to transmit access category information of a successfully authenticated QSTA to the AP.

5. The system of claim 1, wherein the AP is adapted to forcibly disassociate from the corresponding user terminal in response to the mismatch counter value exceeding a preset reference value.

6. The system of claim 1, wherein the AP comprises:

an authenticated terminal list management module adapted to manage access category list information of each terminal authenticated by the authentication server; and

a control module adapted to compare the access category information contained in a QoS control field of the packet received from the user terminal to the access category information of the user terminal on the access category list to control access of the corresponding user terminal to the wireless network.

7. An Access Point (AP), comprising:

an authenticated terminal list management module adapted to manage access category list information of a user terminal authenticated by an authentication server of a wireless network; and

a control module adapted to compare access category information contained in a Quality of Service (QoS) control field of a packet received from the user terminal to access category information of the user terminal on the access category list to control access of the corresponding user terminal to the wireless network,

wherein the access category information comprises at least priority information that involves a content of a fee system with one of AC_VO (Access Category voice), AC_VI (Access Category video), AC_BK (Access Category background), and AC_BE (Access Category best effort),

wherein the authenticated terminal list management module is adapted to manage a terminal list table by receiving access category information of an authorized QoS STAtion (QSTA) from the authentication server, adding the access category information to the user terminal list table, and deleting a disassociated user terminal from the terminal list table, and

wherein the control module is adapted to transmit the preset access category information to the corresponding terminal and to then sequentially increase a mismatch counter value in response to the access category information contained in a QoS control field of the packet received from the user terminal not matching the access category information of the terminal stored in the terminal list table.

8. The AP of claim 7, wherein the control module is adapted to forcibly disassociate from the corresponding user terminal in response to the mismatch counter value exceeding a preset reference value.

9. A wireless network access control method, comprising”

determining a priority for an access category of a wireless network service requested by a user to perform an authentication procedure in response to a user terminal requesting authentication for access to a wireless network;

receiving access category information of an authenticated user terminal and adding the access category information to a user terminal list table;

comparing access category information contained in a packet received from the user terminal to access category information of the terminal previously stored in the user terminal list table; and

controlling access of the user terminal to the wireless network in accordance with a result of the comparison,

wherein the access category information comprises at least priority information that involves a content of a fee system with one of AC_VO (Access Category voice), AC_VI (Access Category video), AC_BK (Access Category background), and AC_BE (Access Category best effort),

wherein preset access category information is transmitted to the corresponding user terminal during the authentication procedure with the authentication server in response to the access category information contained in a Quality of Service (QoS) control field of the packet received from the user terminal not matching the access category information of the user terminal stored in the user terminal list table, and

to then sequentially increase a mismatch counter value in response to the access category information contained in a QoS control field of the packet received from the user terminal.

10. The method of claim 9, further comprising sequentially increasing the mismatch counter value after transmitting the preset access category information to the corresponding user terminal.

11. The method of claim 10, further comprising forcibly disassociating from the corresponding user terminal in response to the mismatch counter value exceeding a preset reference value.

12. The method of claim 11, further comprising deleting information of the disassociated user terminal from the user terminal list table.