JP2000102075A - Subscriber information management system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enhance the security of a communication network by allowing the 1st radio station to request the 1st encryption key possessed by the 2nd radio station via 1st and 2nd base stations and to receive the 1st encryption key approved by 1st and 2nd certificates issued by each base station. SOLUTION: The system consists of a wireless local loop subscriber terminal (radio station) 101 and a wireless local loop base station 104 that connects with the terminal 101 via a radio channel. Even in the case that subscribers bridging over service areas around the base station 104 exchange encrypted information by using an information management device 112 having an information database management device 109 that manages an information database corresponding by one to one or one to multiple to respective subscribers, the 1st authentication device 110 that authenticates a public key issued from each subscriber and the 2nd authentication device that authenticates mutual open key between the base stations 104 as a host device, the authentication is secured.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a subscriber information management system including a wireless local loop terminal (referred to as a radio station), a base station, a base station control device, and an exchange.

[0002]

2. Description of the Related Art FIG. 4 is a basic configuration diagram showing an example of a conventional subscriber information management system. A wireless local loop subscriber terminal (referred to as a radio station) 401; a wireless local loop base station 402 wirelessly connected to the wireless local loop subscriber terminal 401; an antenna 402; Wireless local loop base station controller 407 for controlling wireless link circuit 404 for transmitting and receiving and wired link circuit 405 for transmitting and receiving communication data to and from switch 406
The wireless local loop base station 40 comprising:
2 is a subscriber wireless information communication system 400 that is composed of Generally, a local loop system connects a local exchange to a subscriber terminal in a part of a communication system. Conventionally, connection between a local exchange and a subscriber terminal is performed by a wire such as a copper wire or an optical fiber, but connection by wireless wireless communication is also possible. Wireless communication connection establishes a communication connection via a control channel wirelessly, regardless of mobile or non-mobile subscriber terminals,
After maintaining and establishing a communication connection, information signals such as voice and data are transmitted and received between the base station and the subscriber terminal via the traffic channel. A wireless local loop system is a wireless information system in which a wireless local loop base station and a wireless local loop subscriber terminal are arranged at a location considering transmission and reception of wireless signals.

[0003]

However, in the above-mentioned conventional wireless local loop system, the information managed in the base station for the wireless local loop has a cover area for performing communication with the wireless local loop subscriber terminal. It is only for maintaining and managing, it does not correspond to managing personal information that has the obligation of confidentiality of subscribers and operating services that deploy specific information, Even if the encryption key is managed by each subscriber individually, there is a problem that the security of confidentiality is impaired, and the personal information of the subscriber is leaked by a malicious third party. Was.
The present invention has been made in view of the above points, eliminates the above problems, stores individual subscriber information in a wireless local loop base station used for transmission and reception of radio signals, and has a duty of confidentiality. An object of the present invention is to provide a wireless information system capable of performing a specific information transmission service.

[0004]

SUMMARY OF THE INVENTION The present invention has been made to solve these problems and has a plurality of radio stations and a base station for controlling these radio stations in one local area.
In a subscriber information management system in which a radio station provided in each local area communicates with a radio station provided in another local area via a base station, two types of radio stations provided for each radio station are provided. And a first encryption key held by the second wireless station for the first wireless station to communicate with the second wireless station via the first base station and the second base station. Requesting confidential communication requesting means, a second base station received by the confidential communication requesting means, a first authentication issuing means for adding a first certificate to a first encryption key,
The first base station which has received the certificate of the second certificate further receives a second certificate issuing means for issuing a second certificate, and a first encryption key authenticated by the first and second certificates. The first wireless station provides a subscriber information management system comprising: a decryption unit that decrypts based on a second encryption key corresponding to the first encryption key.

[0005]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing the basic configuration of the subscriber information management system of the present invention. The present invention provides a conventional wireless local loop subscriber terminal (referred to as a wireless station) 101, an antenna 103, a wireless local loop base station 104, a wireless link circuit 105, a wired link circuit 106, a wireless local loop base station controller 107, and The configuration is such that an information database management device 109, a first authentication device 110, a second authentication device 111, and an information management device 112 are added to a subscriber wireless information communication system 100 including an exchange 108. I have.

[0006] Wireless local loop subscriber terminal 10
1, a wireless link circuit 105 connected to the wireless local loop subscriber terminal 101 via a wireless line, a wired link circuit 106 connected to the exchange 108 via a dedicated line, a wireless link circuit 105, and a wired link In a subscriber wireless information communication system 100 comprising a wireless local loop base station 104 having a wireless local loop base station controller 107 for controlling operation with the circuit 106, each subscriber has a one-to-one correspondence. Alternatively, an information database management device 109 that manages an information database corresponding to one-to-many, and a first authentication device 110 that authenticates a public key issued by each subscriber.
An information management device 112 having a second authentication device 111 for performing mutual upper-level authentication of a public key between wireless local loop base stations and a service centered on the wireless local loop base station 104 The feature is that the second authentication device 111 ensures the security even when subscribers across the area exchange confidential information.

FIG. 2 is a block diagram showing a configuration example for explaining a transmission / reception form and an authentication process of the wireless information communication system according to the present invention. The exchange 207 exists in a general public line, and performs information communication between the wireless local loop base stations 204A and 204B via the exchange 207.
At this time, the service area covered by the wireless local loop base station 204A is referred to as local area 1, and the service area covered by the wireless local loop base station 204B is referred to as local area 2.

Prior to communication, the wireless local loop subscriber terminal 201A (referred to as a radio station) has A1 and A1.
2. The wireless local loop subscriber terminal (referred to as a wireless station) 201B has two types of encryption keys B1 and B2. Here, the wireless local loop subscriber terminal 201A is a wireless local loop subscriber terminal 2
When exchanging confidential information with 01B, the wireless local loop subscriber terminal 201A issues a request for confidential communication to the wireless local loop base station 204A. After receiving the request, the wireless local loop base station 204A sends the wireless local loop subscriber terminal 204B in the local area 2 where the wireless local loop subscriber terminal 201B, which is the communication partner, exists. A confidential communication request with 201B is issued.

In response to the request, the wireless local loop base station 204B adds a certificate out to the public key B1 supplied from the wireless local loop subscriber terminal 201B.
After attaching h2, it is issued as a public key B1 'to the wireless local loop base station 204A. Further, the wireless local loop base station 204A transmits the public key B1 '(2
05A) with the certificate auth1 attached to the public key B1 "
(206B) to the wireless local loop subscriber terminal 2
Issue to 01A.

[0010] Here, for the first time, the wireless local loop subscriber terminal 201A acquires the public key B1 "(206A) with the certificate of the wireless local loop subscriber terminal 201B which has been authenticated to the upper and lower levels based on a hierarchical trust model. Therefore, the wireless local loop subscriber terminal 201A performs an encryption process on the data to be transferred using the encryption public key B2 ″ (206B). The encrypted data is transmitted to the wireless local loop subscriber terminal 201B, and decryption processing is performed for the first time using the secret key B2 owned by the wireless local loop subscriber terminal 201B.

On the other hand, from the wireless local loop subscriber terminal 201B to the wireless local loop subscriber terminal 2B
In the case of performing confidential information communication with 01A, authentication is performed by following a process completely opposite to the above-described route, and finally an authenticated public key A1 ″ (206A) is generated. The secret information encrypted by the subscriber terminal 201B is transmitted to the wireless local loop subscriber terminal 201A.

Wireless local loop subscriber terminal 20
1A can analyze data from the transmission source by performing decryption processing using the secret key A2. The difference between the above two processes is that the upper and lower levels of authentication are reversed.
This is the most important point for this system. That is, the final authentication is not performed in the local area, but the base station in another area guarantees the encryption key. In addition, since the base station in another area performs the final higher-level authentication, the trust model has a configuration in which security is enhanced rather than double authentication.

The above-mentioned encryption key A1 and encryption key B1 are publicly disclosed keys (referred to as public keys), whereas the encryption key A2 and encryption key B2 are concealed keys (referred to as private keys) which are never made public. is there. By adopting such a transmission / reception form, a proof of the transmission source and a proof which is data transmitted to the owner of the concealed key are established.

FIG. 3 is a hierarchical configuration diagram showing the configuration of the second subscriber information management system of the present invention. The present invention comprises wireless local loop subscriber terminals 301A-301F,
Wireless Local Loop Base Stations 302A-302C
, An antenna 303, a communication network controller 304,
This is a subscriber information management system including a public exchange 305. The communication network controller 304 is a first layer, the wireless local loop base stations 302A to 302C are a second layer, and the wireless local loop subscriber terminals 301A to 301F.

In such a configuration, when confidential information communication is performed from the wireless local loop subscriber terminal 301A belonging to the third hierarchy to the other wireless local loop subscriber terminals 301B to 301F belonging to the third hierarchy, There are two steps. One is a wireless local loop subscriber terminal 301 in the same local area 1
In the communication with B, in this step, the wireless local loop base station 302A belonging to the second layer becomes the highest-order certificate authority and guarantees the public key issued from the wireless local loop subscriber terminal.

Another is the other local areas 2 and 3
Local loop subscriber terminal 30 located at
In the case of confidential information communication from the wireless local loop subscriber terminals 301A and 301B to 1C to 301F, the second
Wireless local loop base station 302 belonging to the hierarchy
A to 302C are third parties located in their own local areas.
The wireless local loop subscriber terminal 3 belonging to the hierarchy
Issuance of a certificate, that is, authentication is performed only for 01A to 301F.

The guaranteed public key with certificate is transmitted to the wireless local loop base stations 302A to 302A.
C to the communication network controller 304. The communication network controller 304 belonging to the first hierarchy authenticates the public key with authentication transmitted from the second hierarchy, and transmits it to the local area to be communicated. Therefore, it can be seen that the communication network controller 304 is the highest-order certificate authority in this trust model.

This is because the wireless local loop subscriber terminals 301A to 301F scattered in the local area do not trust the public key unless the authentication of the communication line network controller 304 is guaranteed, that is, the other party who wants to communicate confidential information. The proof that is the real public key is transmitted to the communication network controller 30.
If 4 is not given, it indicates that the public key is fake and should not be trusted. In the present invention, the confidential information includes all information that is desired to be known to others and outsiders, including individuals and organizations, including voice communication and data communication using a computer or the like.

[0019]

As described above, according to the present invention, the following effects are expected.

(1) According to the present invention, the security of the entire communication network is improved by introducing a new concept of higher-level authentication based on a hierarchical structure, rather than guaranteeing by easy belief between subscribers, and personal information is leaked. And the probability of an accident such as theft by a malicious third party can be suppressed low, and a more secure information communication network system can be provided.

(2) According to the present invention, even if the number of subscribers in the communication network increases, the vertical hierarchical structure is maintained, and the upper and lower layers are clearly recognized for each hierarchy, so that the security is deteriorated. Without this, the cost can be kept to a minimum and the network can be expanded.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration example for explaining a wireless information communication system according to the present invention.

FIG. 2 is a block diagram showing a configuration example for explaining a transmission / reception form and an authentication process of the wireless information communication system according to the present invention.

FIG. 3 is a block diagram showing a configuration example for explaining the concept of higher-level authentication in the hierarchical structure of the wireless information communication system according to the present invention.

FIG. 4 is a block diagram illustrating a basic configuration example of a wireless information communication system according to a conventional technique.

[Explanation of symbols]

REFERENCE SIGNS LIST 100 subscriber wireless information communication system 101 wireless local loop subscriber terminal 103 antenna 104 wireless local loop base station 105 wireless link circuit 106 wired link circuit 107 wireless local loop base station controller 108 exchange 109 information database management device 110 first Authentication device 111 Second authentication device 112 Information management device 200 Subscriber wireless information communication system 201A, 201B Wireless local loop subscriber terminal 202A, 202B Cryptographic circuit 203 Antenna 204A, 204B Wireless local loop base station 205A, 205B First Encryption key with certificate 206A, 206B Second encryption key with certificate 207 Public switch 300 Subscriber wireless information communication system 301A to 301F Wireless Local loop subscriber terminal 302A-302C Wireless local loop base station 303 Antenna 304 Communication network controller 305 Public switch 400 Subscriber wireless information communication system 401 Wireless local loop subscriber terminal 402 Antenna 403 Wireless local loop base station 404 Radio Link circuit 405 Wired link circuit 406 Switch 407 Wireless local loop base station controller

Claims (2)

[Claims] A local area has a plurality of radio stations and a base station for controlling the radio stations. Radio stations provided in each local area are provided in other local areas via the base station. In a subscriber information management system in which a call is made to and from a designated wireless station, two types of encryption keys provided for each wireless station, and the first wireless station includes a first base station and a second base station And a second base station received by the confidential communication requesting means for requesting a first encryption key held by the second wireless station to communicate with the second wireless station via First certificate issuing means for giving a first certificate to a first encryption key, and a first base station receiving the first certificate issues a second certificate for further issuing a second certificate.
And the first wireless station that has received the first encryption key authenticated by the first and second certificates, decrypts based on the second encryption key corresponding to the first encryption key. A subscriber information management system comprising: 2. A wireless communication system comprising: a plurality of radio stations for each local area; and a base station for controlling transmission / reception from these radio stations; and a communication network controller for controlling the plurality of base stations. In a subscriber information management system in which communication is performed between a base station that controls a radio station provided in an area and a radio station provided in a local area of the own station and another station via a communication network controller, Two types of encryption keys provided for each wireless station and an encryption key issued from the first wireless station when the first wireless station talks to the second wireless station are used to control the first wireless station. And an authentication unit for performing authentication processing by the control device. When data is transmitted and received from a wireless station to another wireless station, an encryption key authenticated by the authentication unit authenticated by the uppermost control device is used. To Subscriber information management system which is characterized the door.