Patent Application
20070043676
The present invention relates to accounting of a Wireless Local Area Network (WLAN), and particularly to an accounting system for a WLAN prepaid subscriber and an accounting method thereof.
A Wireless Local Area Network (WLAN) refers to a computer local area network using a wireless channel as a transmission medium. The WLAN has been developed based upon a wired network. It provides a computer or terminal in the network with mobility and flexibility, which are difficult to achieve in a wired network. Therefore it has been widely applicable in fields where mobile processing of data is required or wiring of physical transmission media can not be done. With the establishment and development of an IEEE 802.11 wireless network standard, the wireless network technology tends to be mature and perfect, which can provide the subscriber with a more secure, reliable and efficient solution for a long-distance network interconnection, and has been widely used in such fields as enterprises, public hotspot places, etc.
A WLAN product generally includes two parts: a wireless network card and an Access Point (AP). An operational mode is that the wireless network card is installed in a terminal, such as a notebook computer, a desktop computer, a Personal Digital Assistant (PDA), etc., and is connected wirelessly with the AP which is in turn connected with a wired network in a wired way, thus enabling a connection with another network, for example, the Internet.
The WLAN is generally applicable to indoor mobile office and outdoor remote backbone interconnection. It effectively solves the following problems: the wiring or adaptation of wires is labor-consuming, the wires are liable to be damaged, sites within the network are unable to move, and particularly how two Local Area Networks (LANs) are connected across dozens of kilometers. It also solves the problems of low transmission rate, high bit error rate, poor reliability of wiring and high rent during a transmission via a telephone line. The wireless network is provided with a powerful encryption technology and a radiation of one-third lower than that of a cell phone, and can deploy a free frequency band of 2.4 GHz, relieving the future worries of subscribers in various industries.
The WLAN involves various technologies, among which one technology standard widely-used is the IEEE 802.11b. The standard of IEEE 802.11b operates at a frequency band of 2.4 GHz, adopts the technology of Complementary Code Keying Modulation, and has a transmission rate up to 11 Mibt/s. The standard of IEEE 802.11b has such advantages as a reliable communication, a low cost, flexibility, mobility, a high throughput, etc.
With the development of the WLAN, traditional operators are also striving to establish WLAN networks. However, one major problem the operators have to face is how to account for WLAN subscribers. There currently exists a common accounting method, which can achieve a unification of WLAN accounting and traditional mobile network accounting through a Business & Operation Support System (BOSS) of the operator. The BOSS system utilizes a computer network system to implement an integrated technology platform supporting services of the operators. Its functions cover various aspects, such as accounting, settlement, account processing, account management, client service, business management, etc. With this integrated platform, it is possible to achieve an integration, a central management and a sufficient share of information and resources from all departments and business systems. The accounting system of BOSS involves two processes of: accounting data collection, and rating. The process of accounting data collection collects basic original data and information concerned and performs a corresponding preprocess, such as error check, format conversion, etc. Results generated from the above processes can record what is related to uses of a service by a subscriber. The process of rating involves calculation of charges to the subscriber.
Currently, the payment method adopted for WLAN accesses is mainly Postpayment, i.e., a server records the online duration or data traffics of the subscriber and settles the total amount monthly. A monthly fee mode is adopted as an alternative way of payment.
A prepaid accounting system for a Wireless Local Area Network (WLAN) according to an embodiment of the present invention includes an authentication control point, an authentication server and a service control point.
The authentication control point is used to control an access of a subscriber to the wireless local area network, send an accounting request including accounting information to the authentication server, and continue or terminate the access of the subscriber to the WLAN in accordance with a response message from the authentication server.
The authentication server is used to perform authentication, authorization and accounting for the subscriber, send an authentication request to the service control point, requesting for update and check of the account balance of the subscriber, and notify the authentication control point of whether to permit the subscriber to continue the access according to a response from the service control point.
The service control point is used to store information of the subscriber, and to update and notify the authentication server of the account balance of the subscriber in accordance with the authentication request.
Preferably, the authentication control point is further used to send the authentication server an accounting-start request message, which includes the accounting information of the subscriber; the authentication server is further used to send the service control point the authentication request message requesting for the check of the account balance of the subscriber, and to respond to the authentication control point with an accounting-start response message upon receipt of the response message.
Preferably, the service control point is further used to respond to the authentication server with an authentication-request response message including the check result.
Preferably, the authentication control point is further used to periodically send the authentication server a midterm-accounting request message, which includes information of the total duration and the total traffic of the access to the wireless local area network of the subscriber;
the authentication server is further used to send the service control point the authentication request message requesting the check of the account balance of the subscriber, and to respond to the authentication control point with a midterm-accounting response message; and
the service control point is further used to update the account balance of the subscriber and to respond to the authentication server with an authentication-request response message including the check result.
Preferably, the authentication control point is further used to send the authentication server an accounting-termination request message, which includes information of the total duration and the total traffic of the access to the wireless local area network of the subscriber;
the authentication server is further used to respond to the authentication control point with an accounting-termination response message, and to send the authentication request message to the service control point; and
the service control point is further used to update the account balance of the subscriber and to respond to the authentication server with an authentication-request response message.
Preferably, protocol Remote Access Dial-In User Services (RADIUS) maybe used for communication between the authentication control point and the authentication server.
Preferably, protocol extended Short Message Peer to Peer may be used for communication between the authentication server and the service control point.
A prepaid accounting method for a WLAN according to an embodiment of the present invention, includes the steps of:
A. upon the start of accounting, an authentication server requesting a service control point to check an account balance of a subscriber in accordance with accounting information from an authentication control point, and the service control point responding to the authentication server with the check result;
B. during the accounting for the subscriber, the authentication server periodically requesting the service control point to check the account balance of the subscriber in accordance with the accounting information from the authentication control point, and the service control point updating the account balance of the subscriber in response to the request from the authentication server and responding to the authentication server with the check result; and
C. upon the termination of the accounting, the authentication server notifying the service control point of the termination of the accounting for the subscriber in accordance with the accounting information from the authentication control point, and the service control point updating the account balance.
Preferably, upon a system initialization, the method may further include the steps of:
the service control point requesting the authentication server to establish a Short Message Peer to Peer (SMPP) connection therewith; and
the authentication server responding to the service control point in responsive to the request and establishing the SMPP connection.
Preferably, upon disconnecting the WLAN, the method may further include the steps of:
the authentication server requesting the service control point to release the connection; and
the service control point responding to the authentication server in responsive to the request.
Preferably, the method may further include the following step before step A:
the subscriber gaining an access to the WLAN through an authentication.
Preferably, step A may further include the steps of:
A1. the authentication control point sending the authentication server an accounting-start request message, which includes the accounting information of the subscriber;
A2. the authentication server sending the service control point an authentication request message requesting the check of the account balance of the subscriber;
A3. the service control point responding the authentication server with an authentication-request response message including the check result; and
A4. the authentication server responding to the authentication control point with an accounting-start response message.
Preferably, step B may further include the steps of:
B1. the authentication control point periodically sending the authentication server a midterm-accounting request message, which includes information of the total duration and the total traffic of the access to the wireless local area network of the subscriber;
B2. the authentication server sending the service control point an authentication request message requesting the check of the account balance of the subscriber;
B3. the service control point updating the account balance of the subscriber and responding to the authentication server with an authentication-request response message including the check result; and
B4. the authentication server responding to the authentication control point with a midterm-accounting response message.
Preferably, step C may further include the steps of:
C1. the authentication control point sending the authentication server an accounting-termination request message, which includes information of the total duration and the total traffic of the access to the wireless local area network of the subscriber;
C2. the authentication server responding to the authentication control point with an accounting-termination response message;
C3. the authentication server sending the authentication request message to the service control point; and
C4. the service control point updating the account balance of the subscriber and responding to the authentication server with an authentication-request response message.
It can be comparatively found that, the technical solutions according to the embodiments of the present invention differ from the prior art in that, the authentication server transfers the accounting information included in the accounting message sent from the authentication control point to the service control point, and the service control point performs an advance deduction of fee or refuses the subscriber to continue his use of the WLAN service in accordance with the account balance of the subscriber and a predetermined policy, and returns the result to the authentication control point via the authentication server.
Such differences of the technical solutions will lead to obvious and advantageous effects, that is, the accounting to a WLAN prepaid subscriber can be achieved so conveniently that a new accounting method other than existing accounting methods can be provided for a WLAN subscriber and operators, and the demand can be met for subscribers in a conventional mobile network intending to use prepaid approach for his access to the WLAN.
Hereafter the present invention will be further described in detail with reference to the drawings in order to make objects, technical solutions and advantages of the present invention more apparent.
As shown in
The authentication control point 10 controls a prepaid subscriber to access the WLAN, sends an accounting-start or accounting-termination request message to the authentication server 20, and receives a response message from the authentication server 20. In the embodiment, the authentication control point 10 may be an Access Point (AP) or an Access Controller (AC). It should be noted that, in the embodiment, the protocol Remote Access Dial-In User Service (RADIUS) is for the communication between the authentication control point 10 and the authentication server 20.
The authentication server 20 performs Authentication, Authorization and Accounting for the subscriber. General modes of authentication include Subscriber Identification Module (SIM) authentication and One Time Password (OTP) authentication. The SIM authentication refers to that the subscriber inserts his SIM card, which contains identity information thereof, into a SIM card slot or a SIM card reader in a network card, logins without an input of his username or password, and is authenticated with corresponding information in the SIM card, and charges are recorded in an account of the SIM card. The OPT authentication introduces an uncertain factor in the login procedure, that is, the subscriber obtains a one-time temporary password in a certain way upon each login, and the password is valid only during the network linking of the subscriber for this time, thereby improving security of the login procedure. Currently, post-pay method or prepaid method is commonly used. The post-pay method refers to that the system adds a record of use in the database each time after the service to the subscriber, followed by a settlement at a certain interval. The prepaid method refers to that the system queries for the qualification and balance of the subscriber prior to his use of the service, only enables a subscriber who meets a requirement to qualify for further use of the service, and updates the data and qualification of the subscriber in a real-time way during his use of the service. The embodiment of the present invention is intended for a prepaid subscriber.
The service control point 30 stores prepaid information of the subscriber for the query of the authentication server 20. In the embodiment, protocol SMPP+ is used for the communication between the authentication server 20 and the service control point 30. The SMPP+ protocol is an extension to the SMPP (Short Message Peer to Peer) protocol and the two protocols are both used for the SMS. In the embodiment of the present invention, the SMPP+ protocol is applied to real-time accounting of the WLAN for the first time.
Such a mechanism as a direct communication of messages between the authentication server 20 and the service control point 30 makes it possible to perform a real-time accounting for prepaid subscribers in the conventional mobile network who access the WLAN.
With reference to the WLAN prepaid accounting system as shown in
The service control point 30 and the authentication server 20 are bound through a binding message therebetween. When the prepaid subscriber intends to use the WLAN service, the authentication server 20 converts an accounting-start message received from the authentication control point 10 into an authentication request message and sends it to the service control point 30, which in turn provides the subscriber with the service and initiates accounting or refuses to provide the subscriber with the service according to the subscriber's account balance and a predetermined policy. In case an authentication is successful and the service is initiated, the authentication control point 10 sends a midterm-accounting request message periodically to the authentication server 20 during the service, which in turn converts the message into an authentication request message and sends the same to the service control point 30, thereby achieving the real-time accounting. When the prepaid subscriber gets offline, the authentication control point 10 sends an accounting-termination request message to the authentication server 20, which in turn converts the message into an authentication request message to the service control point 30, thereby terminating the accounting. The binding relationship between the authentication server 20 and the service control point 30 can be released through a binding-release message.
The embodiment of the WLAN prepaid accounting system has been described as above, and a detailed flow of a WLAN prepaid accounting method will be described hereinafter.
As shown in
In step 102, upon receipt of the request message, the authentication server 20 sends a binding-receipt response message to the service control point 30, indicating its receipt of the request from the service control point 30, and thereby the SMPP connection is established between application layers of both. In order to ensure a reliable transmission of information under the existing network circumstance, the Transmission Control Protocol (TCP) may be applied by the transmission layer for connection. It should be noted that step 101 and step 102 are performed once only at the time of system initialization, and the accounting for each prepaid subscriber starts with step 103.
In step 103, a prepaid subscriber 40 accesses a WLAN through the SIM authentication or the OTP authentication, and begins to use the WLAN service.
In step 104, the authentication control point 10 notifies the authentication server 20 of initiation of accounting by sending an accounting-start request message, which includes corresponding accounting information, such as subscriber account, time information, etc.
In step 105, the authentication server 20 sends the service control point 30 an authentication request message, which requests a check of account balance of the subscriber. This message is sent for determining whether the prepaid subscriber 40 is qualified for further use of the WLAN service to avoid his overdraft and the loss brought to the operator.
In step 106, the service control point 30 sends an authentication-request response message to the authentication server 20. The service control point 30 queries the database for the balance of the prepaid subscriber 40 before sending the authentication-request response message back. On concerning the amount of balance, the service control point 30 performs different processing. In case the balance is sufficient, an advance deduction of fee is performed in accordance with the predetermined policy. Specific policies can be schemed according to a practical situation, for instance, each time an authentication request message is received, a certain amount of balance is deducted in advance, and it is indicated that the subscriber can continue his use of the WLAN for predetermined time. For example, if the SCP receives an authentication request message from the authentication server 20, 0.5 RMB Yuan is deducted which indicates the permission of the subscriber to continue his use of the WLAN for 5 minutes. As an alternative scheme, the deduction of fee can also be performed in accordance with the traffic used by the subscriber. The authentication-request response message indicates the service control point 30 may notify the authentication server 20 of permitting the subscriber to continue his use of the WLAN. In case the balance is insufficient, the subscriber is refused to continue his use of the WLAN.
In step 107, the authentication server 20 sends an accounting-start response message to the authentication control point 10, indicating that the accounting is started and the subscriber can use the WLAN service normally.
In step 108, the authentication control point 10 sends the authentication server 20 a midterm-accounting request message periodically, which includes information of the total duration and the total traffic of the current subscriber. The message is sent for sending the information of accounting timely for an update of the account balance of the subscriber, thereby enabling a real-time management of qualification of the prepaid subscriber 40. The time interval at which to send the message may be set by an administrator in advance in accordance with different requirements of precision.
In step 109, the authentication server 20 converts the midterm-accounting request message into an authentication request message and sends it to the service control point 30. Corresponding conversion policies may be set in accordance with a practical situation. A feasible policy will be described as follows.
The authentication server 20 initiates a process for an advance deduction of fee of the next period for the subscriber upon receipt of the midterm-accounting request message. If the advance deduction of fee is time-based, the period of the advance deduction of fee is the interval at which the authentication control point 10 reports the midterm-accounting request message, and the authentication server 20 divides the interval into configured fixed durations, each of which corresponds to one authentication request message. Also, the interval maybe divided in a traffic-based way. After the number of the authentication messages is obtained, the authentication request message is sent to the service control point 30 to initiate the authentication process and perform the real-time advance deduction of fee. For example, the authentication server 20 receives and processes the midterm-accounting request message sent from the authentication control point 10, and the process for the advance deduction of fee of the next period is initiated. If the interval is 5 minutes, and the configured fixed duration is also 5 minutes, then the authentication server 20 sends one authentication request message to the service control point 30 for the advance deduction of fee.
In step 110, the service control point 30 sends an authentication-request response message to the authentication server 20, wherein the processing policy is the same as in step 106.
In step 111, the authentication server 20 sends a midterm-accounting response message to the authentication control point 10, and notifies the authentication control point 10 of the successful midterm accounting.
In case the subscriber gets offline, in step 112, the authentication control point 10 sends an accounting-termination request message to the authentication server 20, and notifies the authentication server 20 that the subscriber has got offline, wherein the accounting-termination request message includes information of the total duration and the total traffic of the access to the network by the subscriber.
In step 113, the authentication server 20 sends an accounting-termination response message to the authentication control point 10.
In step 114, the authentication server 20 converts the accounting-termination request message into an authentication request message and sends the same to the service control point 30, wherein the processing by the authentication server 20 is the same as in step 109.
In step 115, the service control point 30 sends an authentication-request response message to the authentication server 20, wherein the processing policy is the same as in step 106.
When it is required that the connection be released between the service control point 30 and the authentication server 20, the service control point 30, in step 116, sends a binding release message to the authentication server 20 for requesting a release of the connection with the authentication server 20.
In step 117, the authentication server 20 sends a binding release response message to the service control point 30, and releases the connection with the service control 30. It should be noted that step 116 and step 117 are generally performed by the administrator at the time of disconnecting the network, not merely performed for a particular subscriber.
While the present invention has been illustrated and described with reference to preferred embodiments thereof, it will be apparent to those skilled in the art that it maybe possible to make various modifications of the present invention without departing the scope of the present invention.
| Number | Date | Country | Kind |
|---|---|---|---|
| 200310103719.X | Oct 2003 | CN | national |
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/CN04/01189 | 10/20/2004 | WO | 4/21/2006 |
