Electronics and Telecommunications Research Institute

Hyun Gon Kim

Byung Gil Lee

Sung Won Sohn

Chee Hang Park

Mal Hee Kim

Kyo Chung, Ii

A method for verifying authorization with extensibility in an authentication, authorization, and accounting (AAA) server, and more particularly, a method for verifying authorization in an AAA server capable of uniformly performing an authorization verification function regardless of a variety of authorization verification methods required for a user service provided through a network is provided. The method for verifying authorization with extensibility in an AAA server includes: the AAA server performing user authentication, transmitting the authentication result data to the user, and requesting authorization information for a subscriber service desired to be used, to the user; the user transferring an extensible authorization verification protocol framework having a predetermined format according to an AAA protocol to the AAA server, and requesting verification of the requested authorization; the AAA server verifying whether or not the authorization requested to be verified is set for the user, by referring to the framework; and if the authorization is verified, the AAA server transmitting the authorization verification result to the user, and by allocating a resource related to the authorization, beginning to provide the subscriber service.

Method for verifying authorization with extensibility in AAA server

The AAA client generates accounting data, transmits an accounting data transmission request message to the AAA server, and then receives a response message to the accounting data transmission request message from the AAA server. If receiving a transmission failure response message for the accounting data from the AAA server, the AAA client stores accounting data generated after receiving the transmission failure response message, and if an amount of the stored accounting data is increased to a certain limit, the AAA client sets an identifier for a batch accounting application in the accounting data and transmits an accounting data transmission request message, including stored batch accounting data and the session information, to the AAA server. The AAA server confirms the identifier and the transmission request message and searches the accounting record for session information mapped to the session information included in the ACR message.

Authentication, authorization and accounting (diameter) protocol-based accounting method using batch processing

In the inter-working method of wireless Internet (gateways) according to the present invention described above, DIAMETER which is the first version of the IETF-RFC standard of mobile IP application is applied to the application scenario based on wireless Internet gateway of a home network, not on FA or HA of Mobile IP. After all mobile communication providers connect to wireless Internet, subscribers are not bounded to the network of their mobile communication provider and have the freedom to select any external wireless Internet portal site and use the service of it. Such a wireless Internet connection method will make wireless Internet contents popular in the open wireless network epoch and provide wireless Internet contents providers with an excellent chance. The authentication of the wireless Internet gateways of other networks, authorization, accounting management, structures and techniques proposed by the present invention can give solutions to security problems of wireless internet gateway (ex WAP G/W) that have not overcome, and provide reliability to wireless Internet electronic commercial trade service.

Growing community of inventors

Daejeon, South Korea

Hyun Gon Kim