Patent ID: 7650631

Claim:
A method for verifying authorization with extensibility in an authentication, authorization, and accounting (AAA) server comprising: the AAA server performing user authentication, transmitting the authentication result data to the user, and requesting authorization information for a subscriber service desired to be used, to the user; the user transferring an extensible authorization verification protocol (EARP) framework having a predetermined format, according to an AAA protocol, to the AAA server, and requesting verification of the requested authorization; the AAA server verifying whether or not the authorization requested to be verified is set for the user, by referring to the framework; wherein the predetermined format is formed by adding a first field specifying whether data included in the framework is for ‘authorization verification’ and adding a second field specifying the type of the specified authorization if ‘authorization verification’ is specified in the first field of the extensible authentication verification protocol (EARP) field for authorization, the first and second fields are added to the former format of a framework proposed by an extensible authentication protocol (EAP) to form the EARP framework having the predetermined format; and if the authorization is verified, the AAA server transmitting the authorization verification result to the user, and by allocating a resource related to the authorization, beginning to provide the subscriber service.