KR101395835B1 - Terminal device and authentication manageent apparatus, control method thereof - Google Patents

Abstract

In the present invention, in response to an authentication request of a terminal device connected to a network access device (e.g., an AP), it is determined whether the AP to which the terminal device is currently connected is an authenticated AP that has performed a normal subscriber authentication process It is possible to confirm whether or not the AP accessed by the user who accesses the AP is an authorized AP other than the AP that has stolen the SSID of the specific provider, A terminal apparatus and an authentication management apparatus capable of reducing a customer's damage caused by the operation of the apparatus, and an operation method of the apparatus.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a terminal device and an authentication management apparatus,

The present invention relates to a terminal apparatus and an authentication management apparatus, and more particularly, to a terminal apparatus and an authentication management apparatus, and more particularly to a terminal apparatus and an authentication management apparatus, It is possible to confirm whether or not the AP accessed by the user accessing the AP is an authenticated AP other than the AP that has stolen the SSID of the specific provider. The present invention relates to a terminal device and an authentication management device capable of reducing damage to a customer by an AP that has stolen an SSID, and an operation method of the device.

Currently, it is common to use a wireless data service by connecting to a WiFi network using a terminal device. Accordingly, an AP for accessing a WiFi network can be installed in a place where various businesses and individuals need it, and a terminal device can access a WiFi network by connecting to an AP.

In this situation, only the SSID (Service Set IDentifier) transmitted by the AP is used as a criterion for distinguishing the WiFi network to which the user is connected. That is, the user of the terminal device confirms the SSID transmitted from the various APs at the WiFi-enabled location and connects to the AP having the desired specific SSID (e.g., SSID indicating the mobile communication provider A) And can access the WiFi network that service provider A provides.

In this WiFi environment, if a third party steals an SSID used by a specific business entity (e.g., mobile communication business entity A) in the private AP, the user of the terminal device can not know this, A third party believes in the WiFi network that the mobile communication service provider A) serves and accesses the private AP to use the wireless data service. As a result, if the third party has a malicious purpose, a situation may occur in which the traffic of the connected terminal device is extracted and exploited.

Accordingly, in the present invention, it is proposed that a user accessing an AP and using a wireless data service over a WiFi network can check whether the AP to which the AP is connected is an authenticated AP, not an AP that has stolen the SSID of another provider I want to.

SUMMARY OF THE INVENTION The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a method and apparatus for an AP, in which an AP, to which a terminal device is currently connected, It is possible to authenticate the AP by checking whether it is an AP or not. Thus, it is possible for the user who accesses the AP to confirm whether or not the AP to which the AP is connected is an authenticated AP other than the AP that has stolen the SSID of the specific provider, It is possible to reduce the damage to the customer by the AP that has hijacked the SSID of the specific business.

According to a first aspect of the present invention, there is provided a terminal device including: a connection unit connected to a network connection device; And transmitting the authentication request of the network access device to the authentication management device, based on the subscriber authentication history of each network access device related to the subscriber authentication history included in the authentication management device and performed by each network access device, And an authentication control unit for obtaining an authentication response related to whether or not a subscriber authentication history corresponding to the access device exists.

Preferably, the authentication control unit transmits an authentication request of the network access apparatus to the authentication management apparatus through the network access apparatus, and the authentication management apparatus obtains address information of the network access apparatus from the authentication request can do.

Preferably, the authentication response is related to whether a subscriber authentication history including address information of the network access device obtained from the authentication request among the subscriber authentication histories of the network access devices and identification information of the terminal device exists .

According to a second aspect of the present invention, there is provided an authentication management apparatus comprising: a storage unit for storing a subscriber authentication history for each network access device associated with a subscriber authentication history performed by each network access device; An authentication request receiving unit for receiving an authentication request for a network access device connected to a terminal device; And an access device authentication unit for verifying whether there is a subscriber authentication history corresponding to the network access device based on the subscriber authentication history for each network access device.

Preferably, the access device authentication unit obtains the address information of the network access device and the identification information of the terminal device from the authentication request, and stores address information of the network access device among the subscriber authentication histories of the network access devices, It is possible to confirm whether there is a subscriber authentication history including identification information of the terminal apparatus.

According to a third aspect of the present invention, there is provided a method of operating a terminal device including: connecting a network access device to a network access device; An authentication request step of providing an authentication request of the network access device to an authentication management device; And a subscriber authentication history storage unit for storing a subscriber authentication history related to whether or not a subscriber authentication history corresponding to the network access apparatus exists based on a subscriber authentication history for each network access device included in the authentication management apparatus and related to a subscriber authentication history performed by each network access apparatus And an authentication response acquiring step of acquiring an authentication response.

Preferably, the authentication requesting step transmits an authentication request of the network access device to the authentication management device through the network access device, and the authentication management device obtains address information of the network access device from the authentication request .

According to a fourth aspect of the present invention, there is provided an operation method of an authentication management apparatus, comprising: receiving an authentication request for a network access device connected to a terminal; And an authentication processing step of confirming whether or not a subscriber authentication history corresponding to the network access device exists based on a subscriber authentication history for each network access device related to the subscriber authentication history performed by each network access device.

Preferably, the access device authentication processing step acquires address information of the network access device and identification information of the terminal device from the authentication request, and acquires address information of the network access device And whether there is a subscriber authentication history including the identification information of the terminal device.

Thus, according to the terminal apparatus, the authentication management apparatus, and the operation method of the apparatus of the present invention, when an AP to which a terminal device is currently connected is determined to be a specific one according to an AP authentication request from a terminal apparatus connected to a network access apparatus It is possible to authenticate the AP by checking whether it is the authenticated AP that has performed the normal subscriber authentication process of the provider so that the AP accessed by the user who accesses the AP is not authenticated It is possible to confirm whether or not the AP is present and ultimately to reduce the damage to the customer by the AP that has used the SSID of the specific business for malicious purpose.

1 is a block diagram illustrating a system including a terminal device and an authentication management apparatus according to a preferred embodiment of the present invention.
2 is a block diagram of a terminal device according to a preferred embodiment of the present invention.
3 is a block diagram of an authentication management apparatus according to a preferred embodiment of the present invention.
4 is a flowchart illustrating a network access device authentication procedure of a system including a terminal apparatus and an authentication management apparatus according to a preferred embodiment of the present invention.
5 is a flowchart illustrating an operation method of a terminal according to a preferred embodiment of the present invention.
6 is a flowchart illustrating an operation method of an authentication management apparatus according to a preferred embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described with reference to the accompanying drawings.

1, a system including a terminal device and an authentication management apparatus according to a preferred embodiment of the present invention includes a terminal device 100, a plurality of network connection devices 200, and an authentication management server 300. [

The terminal device 100 may be connected to a network connection device among a plurality of network connection devices 200 and receive wireless data service using a wireless network (e.g., WiFi) supported by the network connection device.

The plurality of network access devices 200 may be a relay device supporting a wireless network, for example, an AP for supporting WiFi.

Hereinafter, for convenience of explanation, the network connection apparatus A 200A is an authenticated AP installed for use by a specific business entity (e.g., mobile communication business entity A), and the network connection device B 200B is a specific business entity It is assumed that the AP is a third-party AP that has used the SSID used by the mobile communication provider A).

The authentication management server (300) stores a subscriber authentication history for each network access device related to the subscriber authentication history performed by each network access device. The authentication management server 300 may include an Authentication, Authorization and Accounting (AAA) server that provides authentication, authorization, and accounting for a subscriber.

Accordingly, the terminal device 100 confirms the SSID transmitted from the plurality of network access devices 200 at the WiFi-enabled place and transmits the received SSID to the network access device having the desired specific SSID (e.g., SSID indicating the mobile communication provider A) And attempts to connect to the network connection apparatus A (200A).

The network access apparatus A 200A corresponding to the authenticated AP processes the subscriber authentication in cooperation with the authentication management server 300 based on the identification information of the terminal apparatus 100. If the subscriber is a normal subscriber, The terminal device 100 can receive wireless data service using a network (e.g., WiFi) supported through the network access device A 200A.

At this time, the authentication management server 300 stores the history of subscriber authentication of the terminal device 100 performed in the network access device A 200A. That is, the authentication management server 300 determines whether or not the subscriber authentication succeeded or failed corresponding to the terminal device 100, the subscriber authentication time, the address information of the network access point A 200A that performed the subscriber authentication ), And identification information (e.g., MAC information, terminal number, telephone number, etc.) of the authenticated terminal device 100.

Accordingly, the authentication management server 300 can manage the subscriber authentication history for each network access device by storing the subscriber authentication history performed by each authenticated network access device.

On the other hand, the terminal device 100 confirms the SSID transmitted from the plurality of network access devices 200 at the WiFi-enabled place and transmits the SSID to the network access device B (200B) having the desired specific SSID ). ≪ / RTI > This means that only the SSID can be confirmed from the viewpoint of the user of the terminal device 100 and therefore the network access device B 200B knows that it is an unauthenticated AP that has used the SSID used by a specific business entity It is because there is not.

The network access apparatus B 200B corresponding to the unauthenticated AP approves the connection to the terminal apparatus 100 without the subscriber authentication process and the terminal apparatus 100 transmits the access request to the terminal apparatus 100 via the network access apparatus B 200B Supported networks (eg WiFi) can be used to provide wireless data services.

If the connected network access device is the authenticated network access device A 200A when the terminal device 100 is connected to the network access device as a relay device supporting the wireless network, in the normal subscriber authentication process, the authentication management server 300 And if the connected network access device is the unauthenticated network access device B 200B, the subscriber authentication history is not stored in the authentication management server 300 because there is no subscriber authentication process.

Due to the fact that the subscriber authentication history performed in the authenticated network access device is stored / managed in the authentication management server 300, the terminal device 100 according to the present invention is connected to the network access device, When an authentication event for a network access device occurs, the authentication management device 300 requests authentication of the network access device 300, and the subscriber authentication history of the network access devices managed by the authentication management device 300 It is possible to obtain a result of checking whether there is a corresponding subscriber authentication history in the authentication response.

At this time, the terminal device 100 transmits an authentication request for the connected network access device to the authentication management device 300 through the network access device, and when the authentication management device 300 is received through the network access device And obtain address information of the network access device from the authentication request.

When the terminal device 100 is described as being connected to the network connection device B 200B, the terminal device 100 transmits identification information (e.g., MAC information, terminal number, telephone number, etc.) (For example, an authentication request message) including the authentication request message to the authentication management apparatus 300 via the network access apparatus B 200B. The address information (e.g., IP information) of the network access device B 200B will be inserted into the source IP of the authentication request message transmitted to the authentication management apparatus 300 through the network access device B 200B.

The authentication management apparatus 300 can acquire address information (e.g., IP information) of the network access apparatus B 200B requested to be authenticated from the source IP of the received authentication request message and transmits the authentication request message to the terminal apparatus Identification information (e.g., MAC information, terminal number, telephone number, etc.) of the terminal 100 can be confirmed.

The authentication management apparatus 300 then transmits the address information (e.g., IP information) of the network connection apparatus B 200B acquired and confirmed from the authentication request message among the subscriber authentication logs for each managed network access apparatus, (E.g., MAC information, terminal number, telephone number, and the like) of the subscriber terminal 100 exists, and transmits the confirmation result to the terminal device 100 as an authentication response send.

Since the network access device B 200B is an unauthenticated network access device as assumed in the foregoing description, when the connection between the terminal device 100 and the network access device B 200B is established, the related subscriber authentication history is stored in the authentication management server 300 The authentication management device 300 will transmit an authentication response to the terminal device 100 indicating that the network access device B 200B is an unauthenticated network access device.

If the network access device B 200B is an authenticated network access device, the subscriber authentication process performed by the network access device B 200B upon connection between the terminal device 100 and the network access device B 200B, The authentication management apparatus 300 will transmit an authentication response to the terminal apparatus 100 indicating that the network connection apparatus B 200B is an authenticated network connection apparatus since the authentication history will already be stored in the authentication management server 300. [

The terminal device 100 outputs the authentication response received from the authentication management apparatus 300 in a form that the user can identify.

That is, when it is determined that the network access device B (200B) is an unauthenticated network access device in which the subscriber authentication history does not exist, based on the authentication response, the terminal device (100) Output information.

On the other hand, when it is confirmed that the network access device B 200B is an authenticated network access device in which the subscriber authentication history exists, the terminal device 100 determines that the network access device B 200B is an authenticated device Ali will output the authentication fact.

Hereinafter, the configuration of the terminal device according to the present invention will be described in more detail with reference to FIG.

The terminal device 100 according to the present invention includes a connection unit 110 for connecting to a network connection device and a request for authentication of the network connection device to the authentication management device 30 to be included in the authentication management device 30 An authentication control unit for obtaining an authentication response related to whether or not a subscriber authentication history corresponding to the network access device exists based on a subscriber authentication history for each network access device related to a subscriber authentication history performed by each network access device 120).

The connection unit 110 is connected to a desired network connection device among a plurality of network connection devices 200 and performs wireless data service using a wireless network (e.g., WiFi) supported by the terminal device 100 through a network connection device And the like.

That is, the connection unit 110 confirms the SSID transmitted from the plurality of network access devices 200 at the WiFi-enabled location, and transmits a specific SSID (e.g., SSID indicating the mobile communication provider A) For example, the network connection apparatus A 200A or the network connection apparatus B 200B.

The network access point A 200A, which is an authenticated AP as described above, processes the subscriber authentication in cooperation with the authentication management server 300 based on the identification information of the terminal device 100, and when the subscriber is a normal subscriber, And network access device B 200B, which is an unauthenticated AP, will approve the connection to terminal device 100 without subscriber authentication processing.

The connection unit 110 connects to the network connection apparatus when an attempt is made to connect to the network connection apparatus and the connection is approved, whereby the terminal apparatus 100 can access the wireless data service (for example, WiFi) To be provided.

The authentication control unit 120 requests the authentication management apparatus 300 to authenticate the network access apparatus when an authentication event for the network access apparatus connected in a state connected to the network access apparatus is established.

At this time, when the authentication event for the network access device occurs, the authentication control unit 120 determines whether the SSID of the connected network access device is an SSID corresponding to a specific business entity (e.g., mobile communication business entity A) The SSID corresponding to the mobile communication service provider A is requested to the authentication management device 300, and if it is not the SSID corresponding to the specific service provider (e.g., mobile communication service provider A) It may notify the user that authentication for a specific network device is unnecessary and may not perform the subsequent process.

Here, the generation of the authentication event for the network access device is performed when a user of the terminal device 100 operates to request authentication for the network access device, and when a predetermined authentication request period has arrived, And the like.

More specifically, when the authentication event for the connected network access device occurs, the authentication control unit 120 transmits an authentication request for the network access device to the authentication management device 300 via the currently connected network access device , So that the authentication management apparatus (300) obtains the address information of the network connection apparatus from the authentication request.

That is, the authentication control unit 120 determines whether or not the identification information (e.g., MAC information, terminal number, telephone number, etc.) of the terminal apparatus itself is included in the network connection apparatus B (For example, an authentication request message) including the authentication request message to the authentication management apparatus 300 via the network access apparatus B 200B.

The address information (e.g., IP information) of the network access device B 200B will be inserted into the source IP of the authentication request message transmitted to the authentication management apparatus 300 through the network access device B 200B. Accordingly, the authentication management apparatus 300 can acquire the address information (e.g., IP information) of the network access device B 200B requested to be authenticated from the received authentication request message, (For example, MAC information, terminal number, telephone number, and the like) of the network connection apparatus B 200B, (E.g., MAC information, terminal number, telephone number, and the like) of the subscriber identity certificate 100 exists.

Therefore, the authentication control unit 120 receives a result of checking whether there is a corresponding subscriber authentication history in the authentication management apparatus 300 as described above in the authentication response.

Accordingly, the authentication control unit 120 outputs the authentication response received from the authentication management apparatus 300 in a form in which the user can identify the authentication response.

That is, when the authentication response is confirmed that the network access device B (200B) is an unauthenticated network access device in which the subscriber authentication history does not exist, the authentication control unit (120) To the output unit (130). Here, the output unit 130 may include at least one of a sound output unit and a display unit.

On the other hand, when it is determined that the network access device B 200B is an authenticated network access device in which the subscriber authentication history exists, the authentication control unit 120 notifies that the network access device B 200B is an authenticated device And outputs the authentication result to the output unit 130.

Here, the authentication control unit 120 described above may be configured in a separate client application form and installed in the terminal device 100.

Hereinafter, the authentication management apparatus according to the present invention will be described in detail with reference to FIG.

The authentication management apparatus 300 according to the present invention includes a storage unit 3400 that stores a subscriber authentication history for each network access device related to a subscriber authentication history performed by each network access device, (320) for receiving an authentication request for a network access device connected to the network access device (320), and an access control unit (320) for determining whether a subscriber authentication history corresponding to the network access device And an access device authenticating unit 330 for authenticating the access device.

The authentication management apparatus 300 according to the present invention may further include a subscriber identity unit 310. [

The subscriber authenticating unit 310 may function as an AAA server that stores subscriber registration information on authentication, authorization and billing for a subscriber, and performs subscriber authentication in cooperation with a network access device requesting subscriber authentication have.

That is, the subscriber authenticating unit 310 interlocks with the network connecting apparatus A 200A requesting subscriber authentication of the terminal apparatus 100 as the terminal apparatus 100 tries to connect to the network connecting apparatus A 200A And can process the subscriber authentication based on the subscriber registration information.

At this time, the subscriber authenticating unit 310 stores the history of the subscriber authentication of the terminal device 100 performed in the network access device A 200A in the storage unit 340. FIG. That is, the subscriber authenticating unit 310 determines whether the subscriber authentication succeeded or failed, the subscriber authentication time, the address information of the network access point A 200A that performed the subscriber authentication (e.g., IP information And the subscriber authentication history including the identification information (e.g., MAC information, terminal number, telephone number, etc.) of the authenticated terminal device 100 in the storage unit 340. [

Accordingly, the storage unit 340 can store the subscriber authentication history for each network access device by storing the subscriber authentication histories performed in the authenticated network access devices including the network access device A 200A.

Of course, when the subscriber authenticating unit 310 is not provided, the authentication managing apparatus 300 acquires subscriber authentication histories performed in each network accessing apparatus authenticated from a separate AAA server and stores the acquired subscriber authentication history in the storage unit 340 Storage / management.

The authentication request receiving unit 320 receives an authentication request for the network access device connected to the terminal device 100. [

When the authentication request for the network access device is received from the terminal device 100, the access device authenticating unit 330 authenticates the network access device corresponding to the network access device according to the authentication request, based on the subscriber authentication history for each network access device And transmits a result of checking whether the subscriber authentication history exists or not to the terminal device 100 as an authentication response.

More specifically, the authentication request receiving unit 320 transmits an authentication request authentication request (e.g., an authentication request message) for the network access device from the terminal device 100 to the network connection device For example, via the network access point A (200A).

Thus, the access authenticator 330 can acquire address information (e.g., IP information) of the network access device, for example, the network access device A 200A requested to be authenticated from the source IP of the received authentication request message (E.g., MAC information, terminal number, telephone number, etc.) of the terminal device 100 requested for authentication from the authentication request message.

Accordingly, the access device authenticating unit 330 obtains the address information (e.g., IP information) of the network access point A 200A acquired and verified from the authentication request message among the subscriber authentication records of the network access devices in the storage unit 340, It is determined whether there is a subscriber authentication history including identification information (e.g., MAC information, terminal number, telephone number, etc.) of the terminal device 100 and the confirmation result is transmitted as an authentication response (100).

That is, as a result of the confirmation, the access device authentication unit 330 obtains the address information (e.g., IP information) of the network access apparatus A 200A and the identification information (e.g., MAC information, terminal number, , The network access device A 200A will not transmit the authentication response to the terminal device 100 because the network access device A 200A has not performed the normal subscriber authentication process.

On the other hand, the connection device authentication unit 330 verifies that the address information (e.g., IP information) of the network connection apparatus A 200A and the identification information (e.g., MAC information, terminal number, The network access apparatus 200A will transmit an authentication response to the terminal apparatus 100 indicating that the network access apparatus 200A is an authenticated network access apparatus.

INDUSTRIAL APPLICABILITY As described above, the terminal device and the authentication management apparatus according to the present invention can be configured such that, in response to an AP authentication request from a terminal device connected to a network access device (e.g., AP) It is possible to authenticate the AP by checking whether it is the authenticated AP that has performed the subscriber authentication process and determine whether the AP accessed by the user who accesses the AP is an authenticated AP other than the AP that has stolen the SSID of the specific provider And ultimately, it can reduce the customer's damage caused by the AP that steals the SSID of a specific business for malicious purpose.

Hereinafter, a method of operating the terminal device and the authentication management apparatus according to the preferred embodiment of the present invention will be described in detail with reference to FIG. 4 to FIG. Here, for convenience of description, the components shown in FIGS. 1 to 3 will be described with reference to corresponding reference numerals.

4 is a flowchart illustrating a method of authenticating a network access device in a system including a terminal apparatus and an authentication management apparatus according to a preferred embodiment of the present invention.

The terminal device 100 confirms the SSID transmitted from the plurality of network access devices 200 at the WiFi-enabled location and transmits the SSID to the network access device having the desired specific SSID (e.g., SSID indicating the mobile communication provider A) And attempts to connect to the apparatus A 200A (S10).

The network access point A 200A corresponding to the authenticated AP processes the subscriber authentication in cooperation with the authentication management server 300 based on the identification information of the terminal device 100 (S15). If the subscriber is a normal subscriber, The terminal device 100 can receive the wireless data service using the network (e.g., WiFi) supported by the network connection device A 200A by approving the connection to the device 100. [

At this time, the authentication management server 300 stores the subscriber authentication history of the terminal device 100 performed in the authenticated network access device A 200A (S20). Thus, the authentication management server 300 can manage subscriber authentication history for each network access device by storing subscriber authentication histories performed in each authenticated network access device.

The terminal device 100 terminates the connection with the network access point A 200A (S30), confirms the SSID transmitted from the plurality of network access points 200 at the WiFi-enabled location, and transmits the desired specific SSID (SSID representing the business entity A) (S40).

The network access apparatus B 200B corresponding to the unauthenticated AP approves the connection to the terminal apparatus 100 without the subscriber authentication process and the terminal apparatus 100 transmits the access request to the terminal apparatus 100 via the network access apparatus B 200B Supported networks (eg WiFi) can be used to provide wireless data services.

If the connected network access device is the authenticated network access device A 200A when the terminal device 100 is connected to the network access device as a relay device supporting the wireless network, in the normal subscriber authentication process, the authentication management server 300 And if the connected network access device is the unauthenticated network access device B 200B, the subscriber authentication history is not stored in the authentication management server 300 because there is no subscriber authentication process.

The terminal apparatus 100 requests the authentication management apparatus 300 to authenticate the network connection apparatus B 200B when an authentication event for the network connection apparatus connected in the state connected to the network connection apparatus B 200B is issued (S60). That is, the terminal device 100 authenticates an authentication request (e.g., an authentication request message) including the identification information (e.g., MAC information, terminal number, telephone number, etc.) of the terminal device itself via the network access device B 200B To the management apparatus 300.

The network access device B 200B inserts the address information (e.g., IP information) of the network access device B 200B itself into the source IP of the authentication request (e.g., the authentication request message) (S65).

The authentication management apparatus 300 can acquire address information (e.g., IP information) of the network access apparatus B 200B requested to be authenticated from the source IP of the received authentication request message and transmits the authentication request message to the terminal apparatus Identification information (e.g., MAC information, terminal number, telephone number, etc.) of the terminal 100 can be confirmed.

Accordingly, the authentication management apparatus 300 receives the address information (e.g., IP information) of the network connection apparatus B 200B acquired and confirmed from the authentication request message among the subscriber authentication histories of the network connection apparatuses, (S70), and transmits the confirmation result to the terminal device 100 as an authentication response (e.g., an authentication response message). If the subscriber authentication history includes the identification information (e.g., MAC information, terminal number, (S80, S85).

Since the network access device B 200B is an unauthenticated network access device as assumed in the foregoing description, when the connection between the terminal device 100 and the network access device B 200B is established, the related subscriber authentication history is stored in the authentication management server 300 The authentication management device 300 will transmit an authentication response to the terminal device 100 indicating that the network access device B 200B is an unauthenticated network access device.

The terminal device 100 outputs the authentication response received from the authentication management apparatus 300 in a form in which the user can identify it (S90).

Hereinafter, an operation method of the terminal device according to the present invention will be described in detail with reference to FIG.

The operation method of the terminal device 100 according to the present invention is a method of operating the terminal device 100 by checking the SSID transmitted from a plurality of network access devices 200 at a WiFi-enabled place and transmitting a specific SSID selected by the user For example, SSID indicating A) to the network connection device B 200B (S100).

That is, the method of operation of the terminal device 100 according to the present invention is a method of operating the network access device B (200B) through the network access device B (200B) So that the wireless data service can be provided.

The operation method of the terminal device 100 according to the present invention is such that when an authentication event for a network access device connected in a state connected to the network access device B 200B is generated (S110) Authentication of the access device is requested (S120).

Here, the generation of the authentication event for the network access device is performed when a user of the terminal device 100 operates to request authentication for the network access device, and when a predetermined authentication request period has arrived, And the like.

More specifically, an operation method of the terminal device 100 according to the present invention is an operation method of an authentication method for a connected network access device B (200B) B 200B to the authentication management apparatus 300 so that the authentication management apparatus 300 obtains the address information of the network connection apparatus B 200B from the authentication request received via the network connection apparatus B 200B .

The operation method of the terminal device 100 according to the present invention is a method of operating the terminal device itself by using identification information (e.g., MAC information, terminal number, telephone number (For example, an authentication request message) including the authentication request message (for example, the authentication request message) to the authentication management apparatus 300 via the network access apparatus B 200B.

The address information (e.g., IP information) of the network access device B 200B will be inserted into the source IP of the authentication request message transmitted to the authentication management apparatus 300 through the network access device B 200B. Accordingly, the authentication management apparatus 300 can acquire the address information (e.g., IP information) of the network access device B 200B requested to be authenticated from the received authentication request message, (For example, MAC information, terminal number, telephone number, and the like) of the network connection apparatus B 200B, (E.g., MAC information, terminal number, telephone number, and the like) of the subscriber identity certificate 100 exists.

Accordingly, the operation method of the terminal device 100 according to the present invention receives the result of checking whether the subscriber authentication history corresponding to the above is present in the authentication management apparatus 300 in the authentication response (S130).

Accordingly, the operation method of the terminal device 100 according to the present invention outputs the authentication response received from the authentication management device 300 in a form in which the user can identify the authentication response.

That is, when it is confirmed that the network access device B 200B is an unauthenticated network access device in which the subscriber authentication history does not exist (S140), the operation method of the terminal device 100 according to the present invention, And outputs warning information about the access device B (200B) (S160). Here, the warning information includes a message and / or a sound indicating that the connected network access device B (200B) is an unauthenticated network access device, and a message and / or sound inducing the connection to be terminated .

On the other hand, when the authentication response is confirmed that the network access device B 200B is an authenticated network access device in which the subscriber authentication history exists (S140), the terminal device 100 determines that the network access device B 200B is authenticated An authentication result indicating that the device is to be output (S150).

Hereinafter, an operation method of the authentication management apparatus according to the present invention will be described in detail with reference to FIG.

The operation method of the authentication management apparatus 300 according to the present invention is an operation method of the authentication apparatus 300 of the network connection apparatus A 200A requesting the subscriber authentication of the terminal apparatus 100 (S205). The subscriber authentication process is performed based on the subscriber registration information in conjunction with the subscriber identity management server 200A.

At this time, the operation method of the authentication management apparatus 300 according to the present invention stores the subscriber authentication history of the terminal apparatus 100 performed in the network connection apparatus A 200A. That is, the operation method of the authentication managing apparatus 300 according to the present invention is a method of operating the network connecting apparatus A (200A) performing the subscriber authentication success or failure corresponding to the terminal apparatus 100, the subscriber authentication time, It is possible to store a subscriber authentication history including address information (e.g., IP information) and identification information (e.g., MAC information, terminal number, telephone number, etc.) of the authenticated terminal device 100.

Thus, the method of operation of the authentication management apparatus 300 according to the present invention stores the subscriber authentication histories performed in each authenticated network access apparatus including the network access apparatus A 200A, thereby obtaining a subscriber authentication history for each network access apparatus (S207).

The operation method of the authentication managing apparatus 300 according to the present invention is a method of operating the authentication managing apparatus 300 according to the present invention when a request for authentication of the network connecting apparatus is received from the terminal apparatus 100, And transmits a result of checking whether the authentication history exists or not to the authentication response.

More specifically, the method of operation of the authentication managing apparatus 300 according to the present invention is a method of operating the authentication managing apparatus 300 according to an embodiment of the present invention. When an authentication request (e.g., an authentication request message) (For example, IP information) of the network access device A 200A requested to be authenticated from the network access device A 200A and the identification information of the terminal device 100 that has requested authentication from the authentication request message , A terminal number, a telephone number, etc.) (S220).

Accordingly, the operation method of the authentication management apparatus 300 according to the present invention is a method of managing the address information (e.g., IP address) of the network access point A 200A acquired and verified from the authentication request message, (Step S230). If the subscriber authentication history includes the identification information (e.g., information) of the terminal device 100 and the identification information (e.g., MAC information, terminal number, (Response message) to the terminal device 100.

That is, the operation method of the authentication management apparatus 300 according to the present invention is a method in which the address information (e.g., IP information) of the network connection apparatus A 200A and the identification information (e.g., MAC information, If there is no subscriber authentication history including the subscriber identification information including the terminal number, the telephone number, etc.), since the network access device A 200A has not performed the normal subscriber authentication process, an authentication response indicating the unauthenticated network access device is transmitted to the terminal device 100 (S250).

On the other hand, the operation method of the authentication management apparatus 300 according to the present invention is a method in which the address information (e.g., IP information) of the network connection apparatus A 200A and the identification information (e.g., MAC information, (S240), if there is a subscriber's authentication history including a subscriber's authentication number, a subscriber's terminal number, a telephone number, etc.).

INDUSTRIAL APPLICABILITY As described above, the operation method of the terminal device and the operation method of the authentication management device according to the present invention are the same as those of the first embodiment in which the terminal device is currently connected according to the AP authentication request from the terminal device connected to the network access device It is possible to authenticate the AP by checking whether the AP is an authenticated AP that has performed a normal subscriber authentication process of a specific provider and to allow the AP accessed by the AP accessing the AP to steal the SSID of the specific provider It is possible to confirm whether or not the AP is a non-authenticated AP and ultimately to reduce the damage to the customer by the AP that has stolen the SSID of the specific business for malicious purpose.

Meanwhile, the steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of both. A software module may reside in a RAM memory, a flash memory, a ROM memory, an EPROM memory, an EEPROM memory, registers, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art. An exemplary storage medium is coupled to the processor such that the processor can read information from, and write information to, the storage medium. Alternatively, the storage medium may be integrated into the processor. The processor and the storage medium may be included within an ASIC. The ASIC may be included in the user terminal device. In the alternative, the processor and the storage medium may be included as separate components within the user terminal device.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.

According to the terminal device and the authentication management apparatus according to the present invention, when an AP to which a terminal device is currently connected according to an AP authentication request from a terminal device connected to a network access device (e.g., an AP) performs a normal subscriber authentication process of a specific business entity It is possible to authenticate the AP by checking whether the AP is one authenticated AP, so that it is possible to check whether the AP that the AP has access to is the authenticated AP, not the AP that has stolen the SSID of the specific provider, As a result, it is possible to reduce the damage of the customer by the AP that has stolen the SSID of the specific business for malicious purposes. Therefore, the possibility of market or operation of the applicable device But it is an invention that is industrially applicable because it can be practically carried out clearly.

100: terminal device
110: connection unit 120: authentication control unit
130:

Claims (9)

In the terminal device,
A connection unit connected to the network connection device; And
The network connection device transmits the authentication request for the network access device to the authentication management device, and the subscriber authentication history for each network access device stored in the authentication management device, And an authentication control unit for obtaining an authentication response related to whether or not a subscriber authentication history including address information of the network access device and identification information of the terminal apparatus exists;
Wherein the subscriber authentication history for each network access device includes at least one of the network connection device and the network connection device according to the subscriber authentication process performed by the network access device when the network access device is an authenticated network access device, The subscriber authentication history of the terminal device. The method according to claim 1,
The authentication control unit,
And transmits the authentication request for the network access device to the authentication management device through the network access device, so that the authentication management device obtains the address information of the network access device from the authentication request. delete A storage unit for storing a subscriber authentication history for each network access device;
An authentication request receiving unit for receiving an authentication request for a network access device connected to a terminal device; And
Acquiring address information of the network access device and identification information of the terminal device from the authentication request and storing address information of the network access device among the subscriber authentication histories of the network access devices based on the subscriber authentication history of the network access devices, And an access device authentication unit for verifying whether or not a subscriber authentication history including identification information of the terminal device exists and providing an authentication response according to the result of the authentication;
Wherein the subscriber authentication history for each network access device includes at least one of the network connection device and the network connection device according to the subscriber authentication process performed by the network access device when the network access device is an authenticated network access device, Wherein the subscriber authentication history of the subscriber is present.
delete A method of operating a terminal device,
A network connecting device connecting step of connecting to a network connecting device;
An authentication request step of providing an authentication request for the network access device to an authentication management device; And
Wherein the authentication information includes address information of the network access device obtained from the authentication request among the subscriber authentication histories of the network access devices and identification information of the terminal device based on the subscriber authentication history for each network access device stored in the authentication management device An authentication response acquisition step of acquiring an authentication response related to whether or not a subscriber authentication history exists;
Wherein the subscriber authentication history for each network access device includes at least one of the network connection device and the network connection device according to the subscriber authentication process performed by the network access device when the network access device is an authenticated network access device, The subscriber authentication history of the terminal device. The method according to claim 6,
The authentication request step includes:
And transmits an authentication request for the network access device to the authentication management device through the network access device so that the authentication management device obtains address information of the network access device from the authentication request. How it works. An authentication request receiving step of receiving an authentication request for a network access device connected to a terminal device; And
Acquiring address information of the network access device and identification information of the terminal device from the authentication request and storing address information of the network access device among the subscriber authentication histories of the network access devices based on the subscriber authentication history of the network access devices, And an authentication processing step of confirming whether or not a subscriber authentication history including identification information of the terminal apparatus exists, and providing an authentication response according to the confirmation result;
Wherein the subscriber authentication history for each network access device includes at least one of the network connection device and the network connection device according to the subscriber authentication process performed by the network access device when the network access device is an authenticated network access device, And a subscriber authentication history of the subscriber.
delete

Images