Method and device for web redirect authentication in WiFi roaming based on AC and AP interworking

Patent metadata

Field	Value
Publication number	US-9654970-B2
Application number	US-201114345538-A
Country	US
Kind code	B2
Filing date	Oct 19, 2011
Priority date	Sep 16, 2011
Publication date	May 16, 2017
Grant date	May 16, 2017

Abstract

A WiFi roaming management method and device which redirect an HTTP request of a mobile terminal from an AP to an AC even though the AC and the AP do not exist in the same subnet, which redirects a source IP address for an HTTP request, after transferring, to an IP address of the AC, and which smoothly support a wireless Internet service in a distributed processing system according to a web authentication of the AC in a WiFi roaming method is provided. A terminal session management function and a traffic control function are separated by a premium AC (Access Controller) and a premium AP (Access Point) interworked with a tunneling method according to a CAPWAP protocol.

First claim

The invention claimed is:

1. A method of managing WiFi roaming comprising:
receiving, at an access point (AP) which supports wireless Internet service for a mobile station, an HTTP request of the mobile station;
redirecting, by the AP, the HTTP request of the mobile station from the AP to a web server over a network, wherein in the redirected HTTP request, a source IP address is replaced with an IP address of an access controller (AC) instead of an IP address of the AP;
in response to said redirecting the HTTP request, receiving, by the web server, a MAC address of the mobile station from the mobile station, and requesting authentication by transmitting to the AC corresponding to the replaced source IP address, login information comprising the MAC address of the mobile station;
performing, by the AC, control via MAC address authentication of the mobile station through communication with an authentication server over the network such that the authentication server starts accounting in response to the MAC address of the mobile station received by the authentication server from the AC being found in a database at the authentication server;
permitting, by the AC, association of the mobile station with the AP based on said performing control via the MAC address authentication; and
receiving, by the authentication server via the AC, accounting information from the AP to which the mobile station is connected and processing, by the authentication server, statistics of the received accounting information for the mobile station.

2. The method of claim 1 , wherein, prior to the HTTP request from the mobile station, the AC receives, from the AP, an association request of the mobile station, and in response to the association request, the AC assigns the IP address to the mobile station, and in response to receiving a failure notification from the authentication server for the MAC address authentication of the mobile station through communication with the authentication server, the AP performs said redirecting of the HTTP request to the web server.

3. The method of claim 2 , wherein the authentication server and the AC are separate servers.

4. The method of claim 1 , wherein the login information further comprises a user identifier (ID) and a password.

5. The method of claim 4 , further comprising:
transmitting, by the web server, to the mobile station a web authentication box in which the login information is input;
receiving from the mobile station, a selection of a box included in the web authentication box, wherein the selected box provides information for a limited association of the mobile station to uniform resource locators (URLs) indicated in the selected box,
permitting, by the AP, the association of the mobile station to the URLs indicated in the selected box regardless of the MAC authentication of the authentication server even when there is no entry of login information.

6. The method of claim 5 , wherein the web server manages location-based URLs specific to a location of the AP, and adds the location-based URLs of the AP in the selected box permitting limited association between the location-based URLs and the mobile station.

7. The method of claim 1 , wherein the AC and the AP are in different subnets.

8. The method of claim 1 , wherein the AC and the AP are connected to each other via the network comprising a plurality of subnets.

9. An access controller (AC) which supports management of WiFi roaming comprising:
a receiver configured to receive, from a web server, a request for authentication comprising login information with a MAC address of a mobile station which is received by the web server from the mobile station, in response to redirecting, by an access point (AP), an HTTP request of the mobile station from the AP to the web server in which a source IP address of the HTTP request is replaced with an IP address of the AC instead of an IP address of the AP;
an authenticator configured to control via MAC address authentication of the mobile station through communication with an authentication server over a network so that the authentication server starts accounting in response to the MAC address of the mobile station received by the authentication server from the AC being found in a database at the authentication server, and configured to permit association of the mobile station with the AP; and
an accounting processor configured to transmit, to the authentication server, accounting information received from the AP to which the mobile station is connected and wherein the authentication ser1 and ver processes statistics of the received accounting information for the mobile station.

10. The AC of claim 9 , wherein, prior to the HTTP request from the mobile station, the authenticator is further configured to receive, from the AP, an association request of the mobile station, to assign the IP address to the mobile station and to receive a failure notification from the authentication server for the MAC address authentication of the mobile station through communication with the authentication server, and in response to the received failure notification, the AP is configured to redirect the HTTP request to the web server.

11. The AC of claim 9 , wherein the AC is in a different subnet from the AP.

Assignees

• Yoon Joo Young
• Han Kyu Jeong
• Ji Yung Ha
• Kt Corp

Inventors

• Yoon Joo Young
• Han Kyu Jeong
• Ji Yung Ha

Classifications

• H04W8/12

  between location registers or mobility servers · CPC title

• H04W8/02

  Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks · CPC title

• H04L63/0892

  by using authentication-authorization-accounting [AAA] servers or protocols · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04W84/12

  WLAN [Wireless Local Area Networks] · CPC title