KR101029366B1 - Method and Apparatus for Storing Subscriber Information at Machine-to-Machine Module - Google Patents

Abstract

The present invention relates to a method for storing subscriber authentication information in an M2M device and a structure therefor.

To this end, the present invention generates a subscriber authentication information providing request message and transmits it to a communication network, and when the subscriber authentication information message is received from the communication network, storing the subscriber authentication information included in the received subscriber authentication information message. To provide. In addition, after transmitting the mobile communication service providing request input from the M2M device to the communication network, and performs the authentication procedure using the stored subscriber authentication information, and transmits the authentication result to the communication network, the data related to the mobile communication service from the communication network If received, the mobile communication service method for delivering the received data to the M2M device. In addition, the present invention provides an M2M device including a connection unit, a data storage unit, a communication unit, and a control unit.

According to the present invention, since it is not necessary to insert a smart card for storing subscriber authentication information, it is possible to increase the portability by reducing the size of the M2M module, it is not necessary to supply power for the operation of the smart card, preventing power shortage problem can do.

Machine to Machine (M2M), Smart Card, USIM, Subscriber Identity

Description

Method and Apparatus for Storing Subscriber Information at Machine-to-Machine Module

The present invention relates to a method for storing subscriber authentication information in an M2M device and a structure therefor. In particular, the present invention relates to a method for storing subscriber authentication information provided in the form of a smart card in an M2M device, and a structure of an M2M device therefor.

Machine-to-Machine (M2M) is a remote management and control solution that supports communication for data transmission between devices and servers using wired or wireless communication.It is a modular type for connection with devices that do not include communication functions. Is implemented.

1 is a configuration diagram briefly showing a communication system using an M2M module.

The M2M device 100 is a device having individual functions, and includes a mobile phone, a personal digital assistant (PDA), a computer, a notebook, an MP3 player, a camera, a telematics machine, a game machine, a fitness machine, a smart terminal, and the like.

The M2M module 200 is a module selectively connected to various M2M devices 100 to transmit and receive data with the service server 400 through the communication network 300. The M2M module 200 is open and has a standard pin map between the device and the module so as to be freely connected to various heterogeneous devices, and supports wireless communication and positioning functions of the connected devices.

The service server 400 is a server connected to the M2M module 200 through the communication network 300 to store and transmit various data for providing a mobile communication service requested from the M2M device 100.

As such, in order to provide a mobile communication service using the M2M module 200, the M2M module 200 should be connected to the communication network 300. In order for the M2M module 200 to access the communication network 300, a procedure for authenticating by transmitting subscriber authentication information to the communication network 300 should be performed.

2 is a view briefly showing the internal structure of a conventionally used M2M module.

The M2M module 200 includes a connection unit 210, a smart card insertion unit 220, a circuit unit 240, and an antenna fastening unit 250.

The connection part 210 is a part for connecting the M2M device 100 and the M2M module 200, and the smart card insertion part 220 is a part for receiving the smart card 230 inserted. The circuit unit 240 is a part in which various functions for operating the M2M module 200 and communicating with the communication network 300 are performed, and the antenna fastening part 250 is a part providing an interface for connecting to an external antenna. .

As such, subscriber authentication information is stored in the smart card 230 in a system where the M2M module 200 is used (hereinafter, referred to as an 'M2M system'), and the smart card 230 is a smart implemented in the M2M module 200. It is inserted into the card insertion unit 220. The M2M module 200 calls the subscriber authentication information stored in the inserted smart card 230 and accesses the communication network 300.

Such M2M module 200 is typically implemented in a size of about 40 to 50 mm horizontally, 35 to 45 mm vertically. The smart card 230 has a size of 15 mm in width and 25 mm in length. Accordingly, the smart card 230 inserted in the M2M module 200 occupies a considerable space in the M2M module 200.

As the smart card 230 occupies a lot of space in the M2M module 200, there is no limit to the size of the circuit unit 240 including a memory, a control module, a communication module, etc., and provides other additional functions. It becomes difficult to secure space for adding modules. As such a limitation occurs in adding a new module, there is a limit in expanding the performance of the M2M module 200. In addition, in order to use subscriber authentication information included in the smart card 230, as a constant current must be continuously provided, a power shortage problem in the M2M module may occur.

In order to solve this problem, the present invention is to store the subscriber authentication information provided in the form mounted on the smart card in the M2M device, to secure the internal space of the M2M device and to secure the power and the M2M for the same Provide the structure of the device.

To this end, the M2M device according to an embodiment of the present invention is a structure of an M2M device that stores subscriber authentication information used in a subscriber authentication procedure for providing a mobile communication service, and an interface for connection with an M2M device to receive a mobile communication service. Providing a connection; A data storage unit for storing various programs and subscriber authentication information for receiving a mobile communication service; A communication unit providing an interface for connecting with a communication network providing a mobile communication service; And a controller configured to control a series of processes of calling the subscriber authentication information from the data storage unit and transmitting the subscriber authentication information to the communication network through the communication unit when the mobile communication service providing request input from the M2M device is input through the connection unit.

In addition, the method for storing subscriber authentication information according to an embodiment of the present invention is a method of storing subscriber authentication information used in a subscriber authentication procedure for providing a mobile communication service in an M2M device, which includes (a) requesting provision of subscriber authentication information. Generating a request message; (b) sending a request message to a communication network; (c) receiving an authentication message including subscriber authentication information from a communication network; (d) extracting subscriber authentication information from the authentication message; And (e) storing the extracted subscriber authentication information.

In addition, the mobile communication service method according to an embodiment of the present invention is a method for receiving a mobile communication service in an M2M device storing subscriber authentication information used in the subscriber authentication procedure, (a) mobile input from the connected M2M device Sending a request for providing a communication service to a communication network; (b) performing an authentication procedure using the stored subscriber authentication information and transmitting the authentication result to the communication network; And (c) if the data related to the mobile communication service is received from the communication network, transferring the received data to the M2M device.

According to the present invention, in order to confirm subscriber authentication information of the M2M device, it is not necessary to insert a smart card, it is possible to increase the portability by reducing the size of the M2M device. In addition, as the space in which the smart card is inserted can be secured as an implementation space of a circuit providing other additional functions, various functions can be added to the M2M device.

In addition, as the power supply provided to operate the smart card inserted in the M2M device becomes unnecessary, a problem of power shortage in the M2M device may be prevented from occurring.

In addition, in the case of industrial M2M devices or M2M devices, additional mechanical considerations for securing durability of the USIM card due to external environmental conditions such as high temperature and high vibration may be eliminated, and thus overall management and usability improvement may be expected.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

Throughout the specification, when a part is said to "include" a certain component, it means that it can further include other components, without excluding other components unless specifically stated otherwise. In addition, the terms “… unit”, “… unit”, “module”, etc. described in the specification mean a unit that processes at least one function or operation, which may be implemented by hardware or software or a combination of hardware and software. have.

3 is a block diagram schematically illustrating an internal structure of an M2M device according to an embodiment of the present invention.

The M2M device 200 according to the embodiment of the present invention includes a connection unit 310, a recognition unit 320, a determination unit 330, a data storage unit 340, a communication unit 350, and a control unit 360.

The connector 310 serves to provide an interface for connecting the M2M device 100 and the M2M device 200. The connector 310 may be configured in the form of a pin as shown in FIG. 2 and inserted into the M2M device 100, and may be implemented in various forms such as a USB or 1394 port.

The recognition unit 320 checks the type of the M2M device 100 connected through the connection unit 310 and performs booting for interworking with the connected M2M device 100. The type of the M2M device to be connected may be determined by checking a pin setting of the connector 310 or by executing a separate program for checking the type of the M2M device 100. In addition, a separate display window is provided in the M2M device 200, and a screen for selecting a type of the M2M device 100 is provided through the display window, thereby allowing the user of the M2M device 100 to be connected to the M2M device 100. May be used.

The determination unit 330 performs a function of determining data format information that can be provided by the M2M device 100 whose type is confirmed through the recognition unit 320.

The data storage unit 340 includes a program storage unit 342 for storing various programs executed in the M2M device 200 and a subscriber authentication information storage unit 344 for storing subscriber authentication information.

The program storage unit 342 includes an M2M device confirmation program used by the recognition unit 320 to confirm the type of the M2M device 100, a communication program for connecting to the communication network 300 and transmitting and receiving data, and a GPS module. Various programs such as a control program for the operation of the M2M apparatus 200 are stored as well as the used positioning program.

Subscriber authentication information storage unit 344, according to an embodiment of the present invention, the subscriber number (telephone number), function and environment variable values, service network information, service table, subscriber authentication key, call time and Various subscriber authentication information such as fee information is stored in a program form. Here, the subscriber authentication information is stored in the subscriber authentication information storage unit 344 through an over-the-air (OTA) message transmitted from the communication network 300, or the subscriber authentication information stored in the subscriber authentication information storage unit 344. Can be modified or deleted.

The communication unit 350 provides an interface for wireless communication with at least one of a wideband code division multiple access (WCDMA) network, a high speed data packet access (HSDPA) network, and a WiMax or WiBro network. It is connected to the service server 400 through the communication network 300 using a communication function. In addition, it transmits various messages transmitted from the control unit 340 to the communication network 300, or serves to receive data transmitted from the communication network 300.

The controller 360 controls the operation of each unit of the M2M device 200 and controls the interworking processor with the M2M device 100. When the M2M module 200 is connected to the M2M device 100, the controller 360 checks the type of the M2M device 100 connected through the connection unit 310 and the recognition unit 320, and connects the service server 400 with the service server 400. When the mobile communication service is requested through the connection, the subscriber registration procedure to the communication network 300 is performed. To this end, the control unit 360 calls the subscriber authentication information stored in the subscriber authentication information storage unit 344, and then performs a series of operations for transmitting to the communication network 300 through the communication unit 350.

Here, in addition to the above configuration, the M2M device 200 may further include an input unit for receiving a control command for operation from a user, a display unit for displaying an operation state, and the like.

4 is a flowchart illustrating a method of storing subscriber authentication information in an M2M device according to an embodiment of the present invention.

In order to receive a mobile communication service according to an embodiment of the present invention, subscriber authentication information should be stored in the data storage unit 340 of the M2M device 200. However, the initial M2M device 200 does not store subscriber authentication information. Accordingly, a process of storing subscriber authentication information in the M2M device 200 is required.

A method for storing subscriber authentication information in an M2M device 200, the method of storing and issuing subscriber authentication information in an M2M device 200 in a mobile communication service provider, and a subscriber visits a mobile communication service company in an offline manner, thereby causing an M2M device. Method of storing subscriber authentication information in the 200, when the user of the M2M device 200 requests the provision of subscriber authentication information to the mobile communication service provider through a wired or wireless network, the mobile service provider through the communication network 300 Various methods, such as a method of transmitting and storing authentication information to the M2M device 200, may be used. Here, a method for storing subscriber authentication information transmitted by the mobile communication service provider through the communication network 300 after the user requests the provision of subscriber authentication information to the mobile communication service provider will be described.

A user who wants to use the M2M device 200 that does not have subscriber authentication information stored in the M2M device 100 connected to a specific function (such as a specific button input) implemented in the M2M device 200 or the M2M device 200 is connected to. A command for requesting provision of subscriber authentication information through a specific function is input (S410).

Through input of a specific button implemented in advance or a specific function implemented in the M2M device 100, the M2M device 200 which has received the subscriber authentication information provision request command generates a message requesting provision of subscriber authentication information. To this end, the program storage unit 342 may store a program for generating a subscriber authentication information provision request message. The subscriber authentication information providing request message generated by the M2M device 200 is transmitted to the communication network 300. At this time, the subscriber authentication information providing request message may be accompanied by a device unique number and a unique number for the subscriber of the M2M device 200 (S420).

In the communication network 300 that receives the subscriber authentication information providing request message with the device unique number and the subscriber unique number of the M2M device 200, the M2M device 200 uses the received device unique number of the M2M device 200. Perform an authentication procedure for (S430).

As a result of confirming the received device unique number, if the M2M device 200 is determined to be a valid device, the received subscriber identification number corresponding to the received subscriber identification information is called from a separate database (S440).

When the subscriber authentication information is confirmed, the communication network 300 generates a subscriber authentication information message including the subscriber authentication information (S450) and transmits it to the M2M device 200. At this time, the subscriber authentication information message is preferably transmitted using the OTA transmission technology.

Here, the OTA transmission technology is a method of transmitting a file or message content in combination with a short message, and is a technology for easily transmitting the file or message content through bidirectional communication using the short message.

When the subscriber authentication information message according to the embodiment of the present invention is transmitted to the M2M device 200 in the form of a control message using an OTA transmission technology, the subscriber authentication information message received in the M2M device 200 without a complicated download procedure. It can be analyzed and executed (S460).

When the subscriber authentication information message transmitted from the communication network 300 is received through the communication unit 350, the M2M device 200 receives the subscriber number, function and environment variable values, service network information, service table, Various subscriber authentication information such as a subscriber authentication key is stored in the subscriber authentication information storage unit 344 (S470).

Through the above method, the M2M device 200 may store subscriber authentication information received from the communication network 300.

In addition, through this method, the M2M device 200 may update the stored subscriber authentication information. That is, in order to update subscriber authentication information, the M2M device 200 generates a subscriber authentication information update providing request message and transmits it to the communication network 300, and in the communication network 300, the subscriber for the subscriber requested to be updated from a separate database. After checking the authentication information to extract the change, and transmits to the M2M device 200 through the subscriber authentication information update message. Upon receiving the subscriber authentication information update message through the OTA transmission technology, the M2M device 200 may update the subscriber authentication information previously stored with the subscriber authentication information stored in the subscriber authentication information update message.

5 is a flowchart illustrating a method of receiving a mobile communication service using subscriber authentication information stored in an M2M device according to an embodiment of the present invention.

A subscriber who wants to receive a mobile communication service using the M2M device 100 to which the M2M device 200 is connected, inputs a command for requesting the provision of the mobile communication service through an application program mounted on the M2M device 100. The mobile communication service providing request input through the M2M device 100 having no communication function is transmitted to the communication network 300 through the M2M device 200 (S510).

The communication network 300 receiving the mobile communication service providing request transmits a message (hereinafter referred to as a subscriber authentication request message) requesting subscriber authentication to the M2M device 200 (S520), and the M2M device 200 The authentication algorithm is performed using the subscriber authentication information stored in the data storage unit 340 (S530).

When the result of performing the authentication algorithm is derived, the M2M device 200 generates an authentication result message including the authentication result and sends it to the communication network 300 (S540), and the communication network 300 receives the message from the M2M device 200. By checking the authentication result (S550), it is checked whether or not it is a valid subscriber who can receive a normal mobile communication service (S560).

Here, when the M2M device 200 receives the subscriber authentication request message transmitted from the communication network 300 to perform an authentication algorithm, and transmits the authentication result to the communication network 300, S520 to check the authentication result in the communication network 300; Operation S550 will be described in detail with reference to FIG. 6.

As a result of checking the received subscriber authentication information, if it is confirmed that the subscriber is an abnormal subscriber who cannot receive a normal mobile communication service, the communication network 300 generates a service unavailable message indicating that the requested mobile communication service cannot be provided. The M2M device 200 transmits the data to the M2M device 100. The M2M device 100 receiving the service unavailable message displays a message indicating that the requested mobile communication service cannot be provided (S570).

However, when it is confirmed that the authentication result received from the M2M device 200 is a valid subscriber capable of receiving a normal mobile communication service, the communication network 300 moves from the plurality of service servers 400 connected to the request requested by the subscriber. After checking the service server 400 providing the communication service, and transmits a message requesting the provision of the mobile communication service to the confirmed service server 400. In this case, the service providing request message transmitted to the service server 400 may include a subscriber number or a device unique number of the M2M device 200 (S580).

The service server 400 receiving the service providing request message calls data for providing the requested mobile communication service and transmits the data to the M2M device 200 through the communication network 300. The M2M device 200 transmits the data received through the communication unit 350 to the M2M device 100 through the connection unit 310, and executes the received data in the M2M device 100 to provide a mobile communication service to a user. (S590).

6 is a flowchart illustrating an authentication procedure in an M2M device according to an embodiment of the present invention.

The communication network 300 receiving the mobile communication service providing request generates an authentication vector (AV) during the authentication process. The authentication vector includes a random challenge (RAND: `` RAND ''), an expected response (XRES: Expected Response, `` XRES ''), and an authentication token (AUTN: Authentication Token for Network Authentication, '' AUTN '). At this time, the AUTN is an anonymous key (AK: Anonymity Key, hereinafter referred to as' AK '), a sequence number (SQN: Sequence Number, hereinafter referred to as' SQN'), authentication management field (AMF: Authentication Management Field, hereinafter ' AMF ') and a message authentication code (MAC: "MAC").

When the authentication vector is generated, the communication network 300 generates a subscriber authentication request message including the RAND and the AUTN and transmits it to the M2M device 200 (S520).

Upon receiving the subscriber authentication request message, the M2M device 200 calculates AK and SQN using the RAND, AUTN, and f5 authentication algorithms (S5310). A predicted authentication code (XMAC: Expected MAC, hereinafter referred to as 'XMAC') is calculated using the calculated AK, SQN, and f1 authentication algorithms (S5320).

The M2M device 200 extracts the MAC from the received AUTN and compares it with the calculated XMAC (S5330). When it is confirmed that the extracted MAC differs from the calculated XMAC (S5340), it indicates that authentication is not normally performed. The authentication rejection message (User Authentication Reject) is transmitted to the communication network (300). The communication network 300 receiving the authentication rejection message generates an authentication failure report and then ends the authentication procedure. In this case, the authentication vector generated in step S520 may be retransmitted to the M2M device 200 or a new authentication vector may be generated and transmitted to the M2M device 200 to perform the authentication procedure in the M2M device 200 again. There is (S5410).

However, if it is determined in step S5330 that the MAC and XMAC are the same, it is checked whether the SQN calculated in step S5310 is within the valid range (S5350). If it is confirmed that the SQN is not within the valid range, the M2M device 200 generates a Synchronization Failure Message including a Synchronization Failure Parameter (AUTS) and transmits it to the communication network 300. (S5420).

However, when it is confirmed in step S5350 that the SQN is located within the valid range, the M2M device 200 calculates and calculates a user authentication response value (RES: Response, hereinafter referred to as 'RES') using an f2 authentication algorithm. A subscriber authentication response message including the RES is generated and transmitted to the communication network 300.

At this time, the subscriber authentication response message transmitted to the communication network 300 includes a cipher key (CK) calculated using the f3 authentication algorithm and an integrity key calculated using the f4 authentication algorithm. Integrity Key) may be included (S5430).

After checking the RES included in the received subscriber authentication response message (S5510), the communication network 300 compares the XRES generated in step S520 and checks whether it is the same (S5520).

If it is determined that the RES included in the subscriber authentication response message is the same as the generated XRES, the subscriber requesting the mobile communication service using the M2M device 100 is determined to be a valid subscriber. Then, the encryption key and the integrity key to be used from the authentication vector is selected (S5530).

As such, when it is determined that the RES and the XRES are valid subscribers according to the comparison result, the communication network 300 performs a step after S580 of transmitting a message requesting the provision of the mobile communication service to the service server 400.

However, if it is determined in step S5520 that the RES included in the subscriber authentication response message is different from the generated XRES, the communication network 300 generates an authentication failure report and then ends the authentication procedure. In this case, the communication network 300 may generate a new authentication vector and transmit the new authentication vector to the M2M device 200 to re-perform the authentication procedure in the M2M device 200.

The above-described f1 authentication algorithm to f5 authentication algorithm are included in the authentication program stored in the program storage unit 342 or the subscriber authentication information storage unit 344 in advance. Here, since the f1 authentication algorithm to the f5 authentication algorithm is well known to those skilled in the art, a detailed description thereof will be omitted.

As described above, through the method described with reference to FIGS. 5 and 6, a subscriber using the M2M device 100 to which the M2M device 200 is connected may use a mobile communication service using subscriber authentication information stored in the M2M device 200. Can be provided.

The embodiments of the present invention described above are not implemented only through the apparatus and the method, but may be implemented through a program for realizing a function corresponding to the configuration of the embodiment of the present invention or a recording medium on which the program is recorded. Implementation may be easily implemented by those skilled in the art from the description of the above-described embodiments.

Although the embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concepts of the present invention defined in the following claims are also provided. It belongs to the scope of rights.

1 is a configuration diagram briefly showing a communication system using an M2M module,

2 is a view briefly showing the internal structure of a conventionally used M2M module,

3 is a block diagram schematically illustrating an internal structure of an M2M module according to an embodiment of the present invention;

4 is a flowchart illustrating a method of storing subscriber authentication information in an M2M module according to an embodiment of the present invention;

5 is a flowchart illustrating a method for receiving a mobile communication service using subscriber authentication information stored in an M2M module according to an embodiment of the present invention;

6 is a flowchart illustrating an authentication procedure in an M2M module according to an embodiment of the present invention.

Claims (13)

In the structure of the M2M device for storing subscriber authentication information used in subscriber authentication procedure for providing mobile communication service, A connection unit providing an interface for connection with an M2M device to receive a mobile communication service; A data storage unit for storing the subscriber authentication information transmitted from a communication network through various programs for receiving the mobile communication service and an over time air (OTA) message; A communication unit providing an interface for connection with a communication network providing the mobile communication service; And When the mobile communication service providing request input from the M2M device is input through the connection unit, the control unit for controlling a series of processes to call the subscriber authentication information from the data storage unit, and then transmits to the communication network through the communication unit M2M device comprising a. The method of claim 1, Recognizing unit for checking the type of M2M device connected through the connection; A determination unit for confirming data format information of the M2M device whose type has been confirmed through the recognition unit; An input unit to receive a control command for the operation of the M2M device; And A display unit for displaying the operation state of the M2M device M2M device further comprising one or more of the. The method of claim 1, The control unit, When the subscriber authentication information update message including the update information on the subscriber authentication information is received through the communication unit, the subscriber authentication stored in the data storage unit is performed by using the update information included in the subscriber authentication information update message. M2M device, characterized in that to modify the information. The method of claim 1, The data storage unit, A program storage unit storing various programs for receiving the mobile communication service; And Subscriber authentication information storage unit for storing the subscriber authentication information M2M device comprising a. A method for storing subscriber authentication information used in a subscriber authentication procedure for providing a mobile communication service in an M2M device, (a) generating a request message requesting the provision of the subscriber authentication information; (b) sending the request message to a communication network; (c) receiving an authentication message including subscriber authentication information from the communication network; (d) extracting the subscriber authentication information from the authentication message; And (e) storing the extracted subscriber authentication information Subscriber authentication information storage method comprising a. The method of claim 5, The request message, And a device unique number of the M2M device or a subscriber unique number previously assigned to the subscriber. The method of claim 6, Between step (b) and step (c), Performing an authentication procedure for the M2M device using the device unique number of the M2M device in the communication network; If the M2M device is found to be a valid device through the authentication procedure, confirming subscriber authentication information stored in a subscriber database or an authentication server using the subscriber unique number; And Generating an authentication message including the confirmed subscriber authentication information and transmitting the same to the M2M device; Subscriber authentication information storage method further comprising. The method of claim 5, After step (e), (f) when the subscriber authentication information update message including the update history of the subscriber authentication information is received from the communication network, modifying the stored subscriber authentication information using the update history included in the subscriber authentication information update message. step Subscriber authentication information storage method further comprising. A method of receiving a mobile communication service in an M2M device storing subscriber authentication information used in a subscriber authentication procedure, (a) transmitting a mobile communication service providing request inputted from a connected M2M device to a communication network; (b) calculating a predicted authentication code using stored subscriber authentication information, performing an authentication procedure, and transmitting an authentication result to the communication network; And (c) if the data related to the mobile communication service is received from the communication network, transferring the received data to the M2M device Mobile communication service method comprising a. 10. The method of claim 9, Step (b) is, (b1) receiving a message requesting subscriber authentication from the communication network; (b2) performing an authentication procedure using subscriber authentication information stored in the M2M device and generating an authentication result; And (b3) transmitting the authentication result to the communication network; Mobile communication service method comprising a. The method of claim 10, Step (b1) is, Receiving an authentication request message including a random challenge (RAND) and an authentication token (AUTN) from the network, wherein the authentication token comprises a sequence number and a message authentication code. The method of claim 11, Step (b2), (b21) calculating a predicted authentication code using the random challenge and the authentication token; (b22) comparing the calculated authentication code with the message authentication code included in the authentication request message to generate an authentication result indicating authentication failure if different, and checking the sequence number included in the authentication request message if identical. Doing; And (b23) generating an authentication result indicating authentication success if the sequence number is within a preset valid range, and generating an authentication result indicating authentication failure if not present in the valid range Mobile communication service method comprising a. 11. The method according to claim 9 or 10, Between step (b) and step (c), Accessing a service server that provides the requested mobile communication service when it is confirmed that the subscriber is a valid subscriber through the authentication procedure; And Receiving data for providing the mobile communication service from the service server and transmitting the data to the M2M device; A mobile communication service method further comprising.

Images